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1 Introduction 

X> 

Automated reasoning in description logics (DLs) has been an active research area for more 
than two decades. It is useful, for example, for the Semantic Web in engineering and querying 
{S) ontologies [lj . One of basic reasoning problems in DLs is to check satisfiability of a knowledge 

base in a considered DL. Most of other reasoning problems in DLs are reducible to this one [2]. 
In this paper we study the problem of checking satisfiability of a knowledge base in the DL 
SHIQ, which extends the basic DL ACC with transitive roles, hierarchies of roles, inverse roles 
^ and quantified number restrictions. 

O Tobies in his PhD thesis |35j proved that the problem is ExpTiME-complete (even when num- 

bers are coded in binary). On page 127 of [35] he wrote: "The previous ExpTime- completeness 
results for SHIQ rely on the highly inefficient automata construction of Definition 4-34 used 
to prove Theorem 4-38 and, in the case of knowledge base reasoning, also on the wasteful pre- 
completion technique used to prove Theorem 4-4%- Thus, we cannot expect to obtain an im- 
plementation from these algorithms that exhibits acceptable runtimes even on relatively "easy" 
instances. This, of course, is a prerequisite for using SHIQ in real-world applications. " 

Together with Horrocks and Sattler, Tobies therefore developed a tableau decision proce- 
dure for SHIQ |18|35j . Later, in [T7] Horrocks and Sattler gave a tableau decision procedure for 
SHOIQ, and in [16] Horrocks et al. gave a tableau decision procedure for STZOIQ. Both the 
logics SHOIQ and STZOIQ are more expressive than SHIQ, but they also have higher com- 
plexity (SHOIQ is NExpTiME-complete and SHOIQ is N2ExpTiME-complete). According to 
the recent survey [20] , the third generation ontology reasoners that support SHIQ or STZOIQ 
are FaCT, FaCT++, RACER, Pellet, KAON2 and HermiT. The reasoners FaCT, FaCT++, 
RACER and Pellet are based on tableaux like the ones in [T8|17|16| . KAON2 is based on a 
translation into disjunctive Datalog [21], and HermiT is based on hypertableaux [3]. Traditional 
tableau decision procedures like the ones in [18 17116] can be implemented with various opti- 
mization techniques to increase efficiency However, such procedures use backtracking to deal 
with disjunction (U) and "or" -branching (e.g., the "choice" operation [18]) and despite advanced 
blocking techniques (e.g., pairwise anywhere blocking [18]), their complexities are non-optimal. 
In particular, the decision procedure for SHIQ given in [18)35] has complexity NExpTime 
when unary representation is used for numbers, and has complexity N2ExpTime when binary 
representation is used. 

By applying global caching |33|10] , together with colleagues (Gore, Szalas and Dunin- 
K§plicz) we have developed complexity-optimal (ExpTime) tableau decision procedures 
for several modal and description logics with ExpTime complexity |7|8)9|27|28|29|30|31(3] . 
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In [8)28|31|3] analytic cuts are used to deal with inverse roles and converse modal operators. 
As cuts may be not efficient in practice, Gore and Widmann developed the first cut-free Exp- 
Time tableau decision procedures, based on global state caching, for the DL ACCX (for the case 
without ABoxes) [12] and CPDL [13] . We have applied global state caching for the modal logic 
CPDL re5 |24j and the DLs ACCX [25J and SHI [26] for the case with ABoxes to obtain cut-free 
ExpTime tableau decision procedures for them. 

As SHXQ is a well-known and useful DL, developing a complexity-optimal tableau decision 
procedure for checking satisfiability of a knowledge base in ST-LXQ is very desirable. The lack of 
such a procedure in a relatively long period up to the current work suggests that the problem is 
not easy at all. For example, in [12] Gore and Widmann wrote "The extension to role hierarchies 
and transitive roles should not present difficulties, but the extension to include nominals and 
qualified number restrictions is not obvious to us. ". 

In this paper we give the first ExpTime tableau decision procedure for checking satisfiability 
of a knowledge base in the DL ST-LXQ. The complexity is measured using binary representa- 
tion for numbers. Our procedure is based on global state caching and integer linear feasibility 
checking. Both of them are essential for our procedure in order to have the optimal complexity. 
Global state caching can be replaced by global caching plus cuts, which still guarantee the op- 
timal complexity. However, we choose global state caching to avoid inefficient cuts although it 
makes our procedure more complicated. 

We are aware of only Farsiniamarj 's master thesis [3] (written under supervision of 
Haarslev) as a work that directly combines tableaux with integer programming. Some re- 
lated works }32I14|15] are discussed in that thesis and we refer the reader there for details. 
In [3] Farsiniamarj presented a hybrid tableau calculus for the DL STiQ (a restricted version of 
STiXQ without inverse roles), which is based on the so-called atomic decomposition technique 
and combines arithmetic and logical reasoning. He stated that "The most prominent feature 
of this hybrid calculus is that it reduces reasoning about qualified number restrictions to integer 
linear programming. [. . . J In comparison to other standard description logic reasoners, our ap- 
proach demonstrates an overall runtime improvement of several orders of magnitude." [3]. On 
the complexity matter, Farsiniamarj wrote "the complexity of the algorithm seems to be char- 
acterized by a double- exponential function" [31 page 79]. That is, his algorithm for STIQ is not 
complexity-optimal. 

Combining global (state) caching and integer linear feasibility checking to obtain a 
complexity-optimal (ExpTime) tableau decision procedure for SHXQ is not a simple exer- 
cise as one might think. Integer linear programming using the branch and bound method [19] 
is known since 1960, Pratt's idea on global caching for PDL [33] is known since 1980 (the term 
"global caching" is absent in [33j), a formal formulation of global caching for some modal and 
description logics [SfTU] is known since 2007 (if not earlier [7]), but the first complexity-optimal 
(ExpTime) tableau decision procedure for ST-LXQ is only proposed now, in the current paper. 
As for experts on tableaux with global caching, it took us a few months to make the idea of 
the combination precise and one year since our paper on STiX [26] to the current paper (on 
e>"HXQ) Q Our method of exploiting integer linear programming is different from Farsiniamarj 's 
one [3]: in order to avoid nondeterminism, we only check feasibility but do not find and use 
solutions of the considered set of constraints as in [3] . 

The rest of this paper is structured as follows. In Section [2] we recall the notation and 
semantics of ST-LXQ and introduce an integer feasibility problem for DLs. In Section [3] we 
present our tableau decision procedure for STiXQ. We start by introducing data structures and 
the tableau framework. We then present illustrative examples. After that we specify our tableau 
rules in detail. At the end of the section we present theoretical results about our tableau decision 
procedure. Those results are proved in Section [4] We conclude this work in Section [5] 



1 Of course, we were busy with teaching duties and other papers. 
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2 Preliminaries 

2.1 Notation and Semantics of SHIQ 

Our language uses a finite set C of concept names, a finite set R of role names, and a finite set 
I of individual names. We use letters like A and B for concept names, r and s for role names, 
and a and b for individual names. We refer to A and B also as atomic concepts, and to a and b 
as individuals. 

For r G R, let r~ be a new symbol, called the inverse of r. Let R = {r~ | r € R} be the 
set of inverse roles. For r G R, define (r~)~ = r. A ro/e is any member of R U R . We use 
letters like R and S to denote roles. 

An {SHIQ) RBox ft is a finite set of role axioms of the form RQSorRoRQR. By 
ext(lZ) we denote the least extension of ft such that: 

- R Q R £ ext(lZ) for any role i? 

- if R C 5 € act (ft) then i?~ C € ext(K) 

- if RoR\ZR£ ext(K) then R~ o R~ \Z R~ £ ext(TZ) 

- if i? C 5 € act (ft) and 5 C T G art (ft) then i? C T G art (ft). 

By i? C-ft 5 we mean iJCSG ext(R), and by trans-ji(R) we mean (Ro RH R) G ext(lZ). If 
i? C-fc S 1 then i? is a subrole of S* (w.r.t. ft). If trans-ji(R) then i? is a transitive role (w.r.t. ft). 
A role is simple (w.r.t. ft) if it is neither transitive nor has any transitive subroles (w.r.t. ft). 

Concepts in SHIQ are formed using the following BNF grammar, where n is a nonnegative 
integer and S is a simple role: 

C,£> ::= T \ t \ A\^C \ CnD\CuD\ 3R.C | VftC | >nS.C \ <nS.C 

We use letters like C and Z? to denote arbitrary concepts. 
A TBox is a finite set of axioms of the form C Q D or C = D. 
An ABox is a finite set of assertions of the form a:C, R(a, b) or a b. 
A knowledge base in SHIQ is a tuple (1Z,T,A), where ft is an RBox, T is a TBox and .A 
is an ABox. 

We say that a role 5 is numeric w.r.t. a knowledge base ifi? = (ft, T,^4) if: 

- it is simple w.r.t. ft and occurs in a concept >nS.C or <nS.C in KB, or 

- 5* Etc i? and R is numeric w.r.t. KB, or 

- S* - is numeric w.r.t. KB. 

We will simply call such an S a numeric role when KB is clear from the context. 

A formula is defined to be either a concept or an ABox assertion. We use letters like <p, ip 
and £ to denote formulas. Let null : C stand for C. We use a to denote either an individual or 
null. Thus, a: C is a formula of the form a:C or null:C (which means C). 

An interpretation I = (A x , - x ) consists of a non-empty set A x , called the domain of I, and 
a function - x , called the interpretation function of I, that maps each concept name A to a subset 
A 1 of A 1 , each role name r to a binary relation r x on A 1 , and each individual name a to an 
element a 1 G The interpretation function is extended to inverse roles and complex concepts 
as follows, where #Z denotes the cardinality of a set Z: 

(r~f = y ) | ( y , x ) G r x } T X = A X ± x = 

(^c) x = z\ x - c x (c n £>) x = c x nD x (c u l>) x = c x ud x 

(3R.C) X ={xeA x \3y [(x, y) G i? x and y G C x ] } 
(VR.Cf = {x G Z\ x | Vy[(x,y) G ii x implies y G <7 X ] } 
(>nR.C) x = {x £ A x \ (l{y | (x,y) G i? x and y G C x } > n} 
{<nR.C) x = {x £ A x \ (){y | (x,y) G R x and y G C x } < n). 
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Note that (r~) x = (r 1 )^ 1 and this is compatible with [r~)~ = r. 

For a set X of concepts, define T x = {i£ A x | x G C" 1 for all C G X}. 

The relational composition of binary relations Ri , R2 is denoted by Ri o R 2 . 

An interpretation X is a model of an RBox 7Z if for every axiom RQ S (resp. R o R C R) of 
7£, we have that R x C S 1 - 1 (resp. it? o i? 2 - C R x ). Note that if X is a model of 7£ then it is also a 
model of extiJZ). 

An interpretation X is a model of a TBox T if for every axiom C C D (resp. C = D) of 7", 
we have that C 1 C U 2 - (resp. C x = D x ). 

An interpretation X is a model of an ABox A if for every assertion a : C (resp. R(a, b) or 
a f b) of .A, we have that a x G C 1 (resp. (a x , ft 1 ) G i? 1 or a x ^b 1 ). 

An interpretation X is a model of a knowledge base {1Z,T,A) if X is a model of all 1Z, T 
and A. A knowledge base (1Z, T, A) is satisfiable if it has a model. 

An interpretation X satisfies a concept C (resp. a set X of concepts) if C x 7^ (resp. X 1 7^ 0). 
A set X of concepts is satisfiable w. r. t. an RBox 1Z and a TBox T if there exists a model of 1Z 
and T that satisfies X. For X = A\JA', where A is an ABox and A' is a set of assertions of the 
form -ii?(a, b) or a = 6, we say that A is satisfiable w.r.t. an RBox 1Z and a TBox T if there 
exists a model X of (1Z,T,A) such that: (a x ,1^) £ R x for all (-<R(a,b)) G .A', and a x = b x for 
all (a = 6) G A'. In that case, we also say that X is a model of (1Z, T, X). 

2.2 An Integer Feasibility Problem for Description Logics 

For dealing with number restrictions in ST-LIQ, we consider the following integer feasibility 
problem: 

m 

a%j ■ Xj Xij bi, for 1 < i < I; 

3=1 

Xj > 0, for 1 < j < m; 

where each a^j is either or 1, each Xj is a variable standing for a natural number, each iXj is 
either < or >, each 6j is a natural number encoded by using no more than n bits (i.e., b( < 2 n ). 
We call this an IFDL(Z, m, n)-problem (a problem of Integer Feasibility for Description Logics 
with size specified by l,m,n). The problem is feasible if it has a solution, and is infeasible 
otherwise. By solving an IFDL(Z, m, n)-problem we mean checking its feasibility. 

Lemma 2.1. If I and m are (at most) exponential in n then every IFDL(l,m,n)-problem can 
be solved in (at most) exponential time in n. □ 

Proof. Assume that / and m are (at most) exponential in n and consider any IFDL(/, m, n)- 
problem. Let J = {1 < j ' < m \ there exists 1 < i < I with aij = 1 and Mj = '<'}. For 
each j G J, let Cj = min{6j | 1 < i < I and = 1} and we have that Xj < Cj. For any 
j G {1, . . . , m} — J, if aij = 1 then cxij is > and Xj can be as big as we want. Thus, without 
affecting feasibility of the problem we can delete constraint number i if it uses some a* j = 1 
with j $l J. So, we assume that J = {1, ... ,m}, which means we have a constraint Xj < Cj 
for every variable Xj, where Cj < 2 n . Now we can check feasibility of the problem by using the 
branch and bound method [19] . One round for branching and bounding runs in polynomial time 
in / + m. Each round reduces the sum of lengths of intervals for variables by 1. As variables are 
bounded by 2 n and / and m are (at most) exponential in n, the checking can be done in (at 
most) exponential time in n. □ 
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3 ExpTime Tableaux for SUTQ 

3.1 Data Structures and the Tableau Framework 

We assume that concepts and ABox assertions are represented in negation normal form (NNF), 
where -i occurs only directly before atomic concepts^] We use C to denote the NNF of -iC, 
and for (p = (a : C), we use Tp to denote a : C. For simplicity, we treat axioms of T as concepts 
representing global assumptions: an axiom C rz D is treated as C U D, while an axiom C = D 
is treated as (CuD)n(DLlC). That is, we assume that T consists of concepts in NNF. Thus, 
an interpretation I is a model of T iff I validates every concept C G T ■ As this way of handling 
the TBox is not efficient in practice, the absorption technique like the one discussed in |30| can 
be used to improve the performance of our algorithm. 

We define tableaux as rooted graphs. Such a graph is a tuple G = (V, E, v), where V is a set 
of nodes, E C V x V is a set of edges, v G V is the root, and each node v G V has a number of 
attributes. If there is an edge (v, w) G E then we call v a predecessor of w, and call w a successor 
of v. Attributes of tableau nodes are: 

— Type(v) € {state, non-state}. If Type{v) = state then we call v a state, else we call v a non- 
state (or an internal node). If Type(v) = state and (v,w) G E then Type{w) = non-state. If 
(v,w) G E and Type{w) = state then u has only w as a successor. 

— SType(v) G {complex, simple} is called the subtype of v. If SType(v) = complex then we 
call v a complex node, else we call v a simple node. The graph never contains edges from a 
simple node to a complex node. If {v, w) is an edge from a complex node v to a simple node 
w then Type(v) = state and Type(w) = non-state. If Type(v) = state and (v,w) G then 
SType{w) = simple. The root of the graph is a complex node. 

— Status{v) G {unexpanded, p-expanded, f-expanded, incomplete, closed, open}, where 
p-expanded and f-expanded mean "partially expanded" and "fully expanded", respectively. 
Status (v) may be p-expanded or incomplete only when Type{v) = state. The status of a node 
may only be changed: 

• from unexpanded to any other status; or 

• from p-expanded to f-expanded, incomplete or closed; or 

• from f-expanded to incomplete, closed or open. 

The values incomplete, closed and open are thus "final". Roughly speaking, closed means 
"unsatisfiable" and open means "satisfiable" in a certain sense. 

— Label(v) is a finite set of formulas, called the label of v. The label of a complex node consists 
of ABox assertions, while the label of a simple node consists of concepts. 

— RFmls{v) is a finite set of formulas, called the set of reduced formulas of v. 

— StatePred(v) G yu{null} is called the state-predecessor of v. It is available only when 
Type(v) = non-state. If v is a non-state and G has no paths connecting a state to v then 
StatePred(v) = null. Otherwise, G has exactly one state u that is connected to v via a path 
not containing any other states, and we have that StatePred{v) = u. 

— ATPred{v) G V is called the after-transition-predecessor of v. It is available only when 
Type(v) = non-state and SType{v) = simple. In that case, if vq = StatePred(v) null) then 
there is exactly one successor v\ of vo such that every path connecting to v must go through 
ui, and we have that ATPred{v) = v\. We define Af terTrans(u) = (ATPred(v) = v). If 
Af terTrans(f ) holds then v has exactly one predecessor u and u is a state. 

— CELabel(v) is a tuple (CELabelT(v), CELabelR(v), CELabelI(v)) called the coming edge la- 
bel of v. It is available only when Af terTrans(u) holds. In that case: 

• CELabelT{v) G {testingClosedness, checkingFeasibility} (the letter T stands for "type"), 

• CELabelR(v) CRu H (is a set of roles), 



2 Every formula can be transformed to an equivalent formula in NNF. This normal form is good, e.g., for the 
implemented tableau decision procedure reported in |23| . 
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• CELabell (v) 6 IU {null} (for u = StatePred(v) being the only predecessor of v, if 
SType(u) = complex then CELabell (v) is an individual, else CELabell (v) = null). 

— FmlsRC(v) is a set of formulas, called the set of formulas required by converse (inverse) 
for v. It is available only when Type(v) = state. 

— FmlFB(v) is a formula, called the formula for branching on at v. It is available only when 
Type(v) = state and Status(v) = incomplete. 

— ILConstraints(v) is a set of integer linear constraints. It is available only when Typeiy) = 
state. The constraints use variables x w indexed by successors w of v with CELabelT (w) = 
checkingFeasibility. Such a variable x w specifies how many copies of w will be used as suc- 
cessors of v. 

We will use also new concept constructors <nR.C and ^nR.C, where R is a numeric role. 
The difference between <nR.C and <nR.C is that, for checking ^nR.C, we do not have to 
look to predecessors of the node. The aim for ^nR.C is similar. We use <nR.C and ^nR.C 
only as syntactic representations of some expressions, and do not provide semantics for them. 
We define 

FullLabel(w) = Label(v) U RFmls(v) - 

{formulas of the form a: (-<nR.C) or a: (>zn R.C)} . 

By the local graph of a state v we mean the subgraph of G consisting of all the paths starting 
from v and not containing any other states. Similarly, by the local graph of a non-state v we 
mean the subgraph of G consisting of all the paths starting from v and not containing any 
states. 

Remark 3.1. We give here a further description/intuition about the structure of G: 

— If u is a state of G and vi, . . . ,Vk are all successors of u then: 

• the local graph of each v i is a directed acyclic graph, 

• if i,j G {1, . . . , k} and i ^ j then the local graphs of V{ and Vj are disjoint, 

• the local graph of u is a graph rooted at u and consisting of the edges from u to v± , . . . , Vk 
and the local graphs ofvi,...,Vk, 

• if w is a node in the local graph of some Vi then StatePred(w) = u and ATPred(w) = Vi. 

— If u is a state of G then: 

• each edge from outside the local graph of u to the local graph of u must end at n, 

• each edge outgoing from the local graph of u must start from a non-state and is the only 
outgoing edge of that non-state. 

— G consists of: 

• the local graph of the root v, 

• the local graphs of states, 

• edges coming to states. 

— Each complex node of G is like an ABox (more formally: its label is an ABox), which can 
be treated as a graph whose vertices are named individuals. On the other hand, a simple 
node of G stands for an unnamed individual. If there is an edge from a simple non-state v 
to (a simple node) w then v and w stand for the same unnamed individual. An edge from 
a complex node v to a simple node w with CELabell (w) = a can be treated as an edge 
from the named individual a (an inner node of the graph representing v) to the unnamed 
individual corresponding to w, and that edge is via the roles from CELabelR(w). 

— G consists of two layers: the layer of complex nodes and the layer of simple nodes. The 
former layer consists of the local graph of the root u together with a number of complex 
states and edges coming to them. The edges from the layer of complex nodes to the layer of 
simple nodes are exactly the edges outgoing from those complex states. There are no edges 
from the layer of simple nodes to the layer of complex nodes. □ 
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We apply global state caching: if v\ and V2 are different states then Label(v{) ^ Label{v2). If 
v is a non-state such that Af terTrans(f ) holds then we also apply global caching for the local 
graph of v : if wi and W2 are different nodes of the local graph of v then Label(wi) ^ Labeliw^)- 
Creation of a new node or a new edge is done by Procedures ConToSucc (connect to a successor) 
or NewSucc (new successor) given on page[7| These procedures create a connection from a node 
v given as the first parameter to a node with attributes Type, SType, Label, RFmls, CELabel 
specified by the remaining parameters. The difference between these procedures is that NewSucc 
always creates a new node and a new connection, while ConToSucc first checks whether there 
exists a node that can be used as a proxy for the successor to be created. NewSucc is called 
outside ConToSucc only when v (the first parameter) is a state. 



Function NewSucc(t> , type, sType, label, rFmls, ceLabel) 

Global data: a rooted graph {V,E,v). 
Purpose: create a new successor for v. 

1 create a new node w, V:=VU{w}, if v 7^ null then E := E U {{v, w)}; 

2 Type(w) := type, SType(w) := sType, Status(w) := unexpanded; 

3 Label(w) := label, RFmls(w) := rFmls; 

4 if type — non -state then 

5 if v = null or Type(v) = state then StatePred(w) := v, ATPred(w) := w 
e else StatePred(w) := StatePred(v) , ATPred(w) := ATPred(v); 

r if Type(v) = state then CELabel(w) := ceLabel; 

8 else FmlsRC (w) := 0, ILConstraints(w) := 0; 

9 return w 



Function FindProxy(type, sType, vi, label) 

Global data: a rooted graph (V,E,v). 

1 if type — state then W :— V else W := the nodes of the local graph of v\; 

2 if there exists w £ W such that Type(w) = type and SType(w) = sType and Label(w) = label then 
return w else return null 



Function ConToSucc(w, type, sType, label, rFmls, ceLabel) 
Global data: a rooted graph (V,E,v). 

Purpose: connect a non-state v to a successor, which is created if necessary. 

1 if type — state then «i := null else V\ := ATPred(v); 

2 w := FindProxy(tj/pe, sType, vi, label); 

3 if to / null then E ~ EU {{v,w)}, RFmls(w) := RFmls(w) U rFmls 

4 else w := NewSucc(u, type, sType, label, rFmls, ceLabel); 

5 return w 



From now on, let {K,T,A) be a knowledge base in NNF of the logic SUXQ, with A / 0.^ 
In this section we present a tableau calculus CsniQ f° r checking satisfiability of (1Z,T,A). 
A Cs^xg-tableau for (1Z, T , A) is a rooted graph G = (V, E, v) constructed as follows: 

Initialization: At the beginning, V = {^}, E = 0, and v is the root with Typeiy) = non-state, 
SType(u) = complex, Status{u) = unexpanded, Label(u) = A U {(a : C) \ C € T and a is an 
individual occurring in .A}, StatePred{v) = null, RFmls(v) = 0. 

Rules' Priorities and Expansion Strategies: The graph is then expanded by the following 
rules, which will be specified shortly: 



3 If A is empty, we can add o:T to it, where a is a special individual. 
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(UPS) rules for updating statuses of nodes, 
(US) a unary static expansion rule, 
(KCC) rules for keeping converse compatibility, 
(NUS) a non-unary static expansion rule, 
(FS) forming- state rules, 
(TP) a transitional partial-expansion rule, 
(TF) a transitional full-expansion rule. 
Each of the rules is parametrized by a node v. We say that a rule is applicable to v if it can 
be applied to v to make changes to the graph. The rules (UPS), (US), (KCC) (in the first three 
items of the above list) have highest priorities, and are ordered decreasingly by priority. If none 
of them is applicable to any node, then choose a node v with status unexpanded or p-expanded, 
choose the first rule applicable to v among the rules in the last four items of the above list, and 
apply it to v. Any strategy can be used for choosing v, but it is worth to choose v for expansion 
only when v could affect the status of the root v of the graph, i.e., only when there may exist 
a path from v to v without any node of status incomplete, closed or open. 

Note that the priorities of the rules are specified by the order in the above list, but the rules 
(UPS), (US), (KCC) are checked globally (technically, they are triggered immediately when 
possible), while the remaining rules are checked for a chosen node. 

The construction of the graph ends when the root v receives status closed or open or when 
every node that may affect the status of v (i.e., reachable from v via a path without nodes with 
status incomplete, closed or open) has been fully expanded (i.e., has status f-expanded). 

Remark 3.2. To give a deeper intuition behind the structure of a Cs^iQ-tableau G constructed 
for a knowledge base KB = (1Z,T,A), assume that the knowledge base is satisfiable and let 
us briefly describe how a model X for KB can be constructed from G. A precise description 
will be given in the proof of completeness of the calculus. As we will see, the root v must have 
status different from closed and there exists a complex state Vk with status different from closed. 
Label (vk) is an ABox that forms the base for the constructed model X. Each named individual 
a occurring in that ABox is used as an element of the domain of X; role assertions in that ABox 
specify edges between those elements in X; concept assertions in that ABox specify whether 
a named individual a is an instance of a given atomic concept in X. The rest of X consists 
of disjoint trees rooted at those named elements, which may be infinite. Each element of the 
domain of X corresponds either to one of those named individuals or to a simple state of G with 
status different from closed. It is possible that only a number of simple states of G are used for 
constructing X, and each simple state of G may correspond to many elements of the domain 
of X (due to global state caching). 

Let y be an element of the domain of X. How successors of y in X can be constructed? 

If y corresponds to a named individual a then let W be the set of successors w 
of Vk such that: either CELabelT (w) = testingClosedness and we set n w = 1; or 
CELabelT(w) = checkingFeasibility, CELabelI(w) = a and the value of Xyj 111 Si fixed solution for 
IL Constraints (vk) , denoted by n w , is greater than 0. 

If y corresponds to a simple state u of G then let W be the set of successors w of u 
such that: either CELabelT(w) = testingClosedness and we set n w = 1; or CELabelT(w) = 
checkingFeasibility and the value of x w in a fixed solution for IL Constraints (vS) , denoted by n Wl 
is greater than 0. 

For each w 6 W, there must exist a path in G starting from (the non-state) w, going through 
some or zero other non-states and ending at a state w' with status different from closed. For 
each w £ W, we create n w successors for y (in X) that correspond to w' , using edges labeled by 
the roles from CELabelR(w) . Roughly speaking, all nodes in the path from w to w' are stitched 
together to make a successor for y, which is then cloned n w times. The set of atomic concepts 
such a successor must be an instance of in X consists of the atomic concepts in Label (w 1 ). 
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Notice that non-states are like "or" -nodes, while states are more sophisticated than "and"- 
nodes. The transitional partial-expansion rule deals with non-numeric roles, while the transi- 
tional full-expansion rule deals with numeric roles. □ 



3.2 Illustrative Examples 



Before specifying the tableau rules in detail, we present simple examples to illustrate some ideas 
(but not all aspects) of our method. Despite that these examples refer to the tableau rules, we 
choose this place for presenting them because the examples are quite intuitive and the reader 
can catch the ideas of our method without knowing the detailed rules. He or she can always 
consult the rules in the next subsection. 



(a) 



a :T, a:3r.(An Vs. -.A) 



(b) 



a :T, a:3r.(An Vs. -A) 



a :T, a:3r.(An Vs. -.A) 



a :T, a:3r.(An Vs. -A) 
incomplete 
FmlsRC : a:^A, a:Vs.^A 



An Vs.^A, 
3r.(An Vs.^A) 



A, Vs.^A, 
3r.(An Vs.^A) 



An Vs.^A, 
3r.(An Vs.^A) 



A, Vs.^A, 
3r.(An Vs.^A) 



V4 



A, Vs.^A, 
Vr.^A, Vr-.^A, 
3r.(An Vs.^A) 



V4 

A, Vs.^A, 
Vr.^A, Vr-.-iA, 
3r.(An Vs.^A) 



Fig. 1. An illustration for Example 3.3 part I. The graph (a) is the graph constructed until checking converse 
compatibility for vi. In each node, we display the formulas of the node's label. The root v is expanded by 
the forming-state rule (FS2). The complex state v\ is expanded by the transitional partial-expansion rule, with 
CELabelT (vi) = testingClosedness, CELabelR(v2) = {r, s, s~} (s and s~ are included because r s and 
r C TC s~) and CELobelKv^) = a. The simple non-states V2 and ^3 are expanded by the unary static expansion 
rule (the concepts Vr.^A and Vr~.^A are added into Labelivi) because Vs.^A G Label(vz), r \—iz s and r~ s). 
The node v\ is the only state. We have, for example, StatePred(v4,) = vi and ATPred(v4,) — V2- Checking 
converse compatibility for V\ using V4 (i.e., using the facts that {Vs.^A, Vr~ .^A} C Label(v4,), StatePredivi) = «i, 
ATPred{vi) = V2, CELabelTiv^) = testingClosedness, CELabelRiv^) = {r, s, s~}, CELabell (^2) = a, r~ s and 
transn(R) holds), Status(vi) is set to incomplete and FmlsRC(vi) is set to {a: ->A, a : Vs.^A}. This results in the 
graph (b). The construction is then continued by re-expanding the node v. See Figure [2] for the continuation. 



10 L.A. Nguyen 



v 

a ::T, a:3r.(A n Vs. -A) 



a ::T, a:3r.(An Vs.-A) 
incomplete 

FmlsRC : a:^A, a:Vs.-A 



V5 

:T, a:3r.(AnVs.-A), 
a:-A, a:Vs.-A 



t'i> 



JnVs.^, 
3r.(An Vs.-A) 



a :T, a:3r.(A n Vs.-A), 
a: -A, a:Vs.-A, 
a:Vr.-A, a:Vr~.-A 



A, Vs.-A, 
3r.(AnVs.^A) 



a :T, a:3r.(A nVs.-A), 
a: -A, a:Vs.-A, 
a:Vr.-A, a:Vr~.-A 



''4 



A, Vs.^A, 
Vr.^A, Vr-.-iA, 
3r.(An Vs.-A) 



"8 



AnVs.^A, 
-A, Vs.^A, 
3r.(An Vs.-A) 



± 



Vg 


A, Vs.-A, 


-■A, 


3r.(AnVs 


-nA) 


closed 





Fig. 2. An illustration for Example |3.3| part II. This is a Cs^iQ-tableau for (TZ,T,A). As in the part I, in each 
node we display the formulas of the node's label. The root u is re-expanded by deleting the edge (v,Vi) and 
connecting v to a new complex non-state Wg. The node v$ is expanded using the unary static expansion rule (the 
assertions a:Vr.^A and a:W~.^A are added into Label(ve) because a:Vs.^A £ Label(v^,), r s and r~ s). 
The complex non-state v§ is expanded using the forming-state rule (FS2). The complex state V7 is expanded using 
the transitional partial-expansion rule, with CELabelT(vs) = testingClosedness, CELabelR(vs) = {r, s,s~} (s and 
s~ are included because r C TC s and r C-jj s _ ) and CELabell (ys) = a. The simple non-state v$ is expanded using 
the unary static expansion rule. Since {A, -*A} C Label(vg), the simple non-state vg receives status closed. After 
that the nodes v&, . . . , 1)5 and u receive status closed in subsequent steps. The nodes vi and V7 are the only states. 
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a: {Vr.Ai, <3r.Ai, 3r.A 2 , >2r.A 3 } 
r(a, b) 

b: {(-.Ai U -,A 2 ), -hA 3 } 



in 



a: {Vr.Ai, <3r.Ai, 3r.A 2 , >2r.A 3 } 
r(a, b) 

b: {(-.Ai U -.A 2 ), ~.A 3 , Ai} 



('2 



6: {^A 3 , Ai, -.Ai} 



Co 



a: {Vr.Ai, <3r.Ai, 3r.A 2 , >2r.A 3 } 
r(a, 6) 

6: {-.A3, Ai, -.A 2 } 

1 



1:4 



a: {Vr.Ai, <3r.Ai, 3r.A 2 , >2r.A 3 , 
^2r.Ai, hlr.A 2 , h2r.A 3 } 
r(a, 6) 
6: {-.A3, Ai, -1A2} 



^5 
Ai,A 2 



V 




Ai, A3 



V7 



vg 




f9 




flO 


Ai,A 2 




Ai, A 3 




A1.A2.A3 



Fig. 3. An illustration of the tableau described in Example |3.4| The marked nodes V4, «g, vg, Vio are states. 



Example 3.3. This example is based on an example in the long version of our paper |26| on 
SUT. Let 

TZ = {r □ s, r~ C s, s o s C s} 
T = {3r.(ylnVs.^4)} 
.4 = {a:T}. 

In Figures [T] and [2] we illustrate the construction of a C^-^xQ-tableau for the knowledge base 
(1Z, 7~, A). At the end the root v receives status closed. By Theorem 3.7 given later in this paper, 
(TZ,T,A) is unsatisfiable. As a consequence, (7£, T, 0} is also unsatisfiable. □ 

Example 3.4- Let us construct a Cs^xQ-tableau f or (TZ,T,A), where 1Z = 0, T = and 

A = {a: Vr.Ai, a:<3r.At, a:3r.A 2 , a:>2r.A 3 , r(a,b), b: (-<Ai U -u4 2 ), b:^A 3 } 

An illustration of the tableau is given in Figure [3j 

At the beginning, the graph has only the root v which is a complex non-state with 
Label(v) = A. 

Since {a:VrA%, r(a, b)} C Label(v), applying the unary static expansion rule to v, we connect 
it to a new complex non-state v\ with Label{v\) = Label{v) U {b:A\}. 

Since b: (pA\ U -1.A2) G Label{v\), applying the non-unary static expansion rule to ui, we 
connect it to two new complex non-states v 2 and V3 with 

Label(v 2 ) = Label(vi) - {b:(-^A 1 U ->A 2 )} U {6:^1} 
Label(v 3 ) = Label(vi) - {b:{^Ai U ^4 2 )} U {6:^A 2 }. 
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Since both b:A\ and b:-*Ai belong to Label{v 2 ), the node v 2 receives status closed. 
Applying the forming-state rule (FS2) to v%, we connect it to a new complex state with 

Label(v4,) = Label(v 3 ) U {a: ^2r.A 1 , a:^lr.A 2 , a:^2r.A 3 }. 

The assertion a: ^2r.Ai G Label{v 4 ) is due to a: <3r.A\ G Label(v 3 ) and the fact that {r(a,b), 
b : Ai} C Label(v 3 ). The assertion a : >z \ r.Ai G Label(v&) is due to a : 3r.A 2 G Label(v 3 ) and 
the fact that 6 : -1.A2 £ Label{v 3 ). Similarly, the assertion a :>z 2r.A 3 G Label(v 4 ) is due to 
a:>2r.A 3 G Label(v 3 ) and the fact that 6: -1^.3 G Label(v 3 ). When realizing the requirements 
for a at V4, we will not have to pay attention to the relationship between a and b. 

Applying the transitional partial-expansion rule to v^, we change its status to p-expanded. 
After that, applying the transitional full-expansion rule to V4, we connect it to new sim- 
ple non-states 115, vq and vj with CELabelT equal to checkingFeasibility, CELabelR equal to 
{r}, CELabell equal to a, Label(vs) = {Ai,A 2 }, Label^v^) = {^1,^3} and Label(vj) = 
{A\, A 2 , A3}. The creation of v§ is caused by a : >z lr.A 2 G Label(v4,), while the creation of 
vq is caused by a: ^2r.A 3 G Label{v 4 ). The node V7 results from merging v§ and vq. Further- 
more, ILConstraints{v/i) consists of x Vi > 0, for 5 < i < 7, and 

3^t! 5 ~\~ x V q -\- x V7 ^ 2 

The set IL Constraints (v^) is feasible, e.g., with x Vb = and x V6 = x V7 = 1. 

Applying the forming-state rule (FSi) to v$ (resp. vq, V7), we connect it to a new simple 
state vs (resp. t>g, vio) with the same label. 

Expanding the nodes Vg, vg and viq, their statuses change to p-expanded and then to 
f-expanded. The graph cannot be modified anymore and becomes a Cs-^rg-tableau for (TZ, T, A), 



with Status (y) 7^ closed. By Theorem 3.7 (given later in this paper), the considered knowledge 
base (TZ,T,A) is satisfiable. Using the solution x V5 = 0, x V6 = x V7 = 1 for ILConstraints{v^) , 
we can extract from the graph a model X for (TZ, T, A) with A x = {a, b, vg, v 10}, a 1 = a, b x = b, 
A\ = {b,v g ,vi }, A 1 = {vio}, A\ = {^9,^10} and r x = {{a, 6), {a,v 9 ), (a,v w )}. □ 

Example 3.5. Let us construct a Cs^xg-tableau for (TZ,T,A), where TZ = 0, T = and 

A = {a:3r.A, a:\fr.(^AU ^B), a:>1000r.B, a : < 1000 r.(A U B)}. 

An illustration of the tableau is given in Figure |4j 

At the beginning, the graph has only the root v which is a complex non-state with Label(v) = 
A. Applying the forming-state rule (FS2) to v, we connect it to a new complex state v\ with 

Label(vi) = Label (u) U {a: >zlr.A, a-.yiOOOr.B, a: < 1000r.(A U B)}. 

Applying the transitional partial-expansion rule to v\, we change its status to p-expanded. 
After that, applying the transitional full-expansion rule to v\, connect it to new simple non- 
states v 2 , . . . ,v? with CELabelT equal to checkingFeasibility, CELabelR equal to {r}, CELabell 
equal to a, and 

Label(v 2 ) = {A, ^A U -lB, A U B} 
Label(v 3 ) = {A, ^A U ->B, ^A n ->B} 
Label(v 4 ) = {B, ^A U^B, A U B} 
Label(v 5 ) = {B, ^A U ->B, ->A n ^B} 
Label(v 6 ) = {A, B, ->A U^B, AU B} 
Label (v^) = {A, B, ^A U ->B, ^An^B}. 
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Vl2 



Fig. 4. An illustration of the tableau described in Example |3. 5 



Note that ->A n ->B is the NNF of A U B. The nodes V2 and are created due to a : y 1 r.yl G 
Label{v\). The nodes and t>5 are created due to a : y 1000 r.-B G Label{v\). The node 
results from merging t>2 and U4. The node U7 results from merging and U5. Furthermore, 
IL Constraints (v\) consists of x v< > 0, for 2 < i < 7, and 



+ x vs + x V6 + Xt, 7 > 1000 
X V o + x VA + Xt, K < 1000. 



Applying the unary static expansion rule to V3, we connect it to a new simple non-state vg 
with Label(vs) = {A, ->A, . . .}. The status of vg is then updated to closed and propagated back 
to make the status of V3 also become closed, which causes addition of the constraint x V3 = 
into the set IL Constraints (vi) . 

Similarly, applying the unary static expansion rule to 1)5, we connect it to a new simple 
non-state vg with Label(vg) = {B, ->B, . . .}. The status of vg is then updated to closed and 
propagated back to make the status of v§ also become closed, which causes addition of the 
constraint x V5 = into the set ILConstraints{v\) . 

Applying the non- unary static expansion rule to vq, we connect it to new simple non-states 
via and v\\ with Label(v%o) = {A,-*A, . . .} and Label(vn) = {B,^B, . . .}. The statuses of v\q 
and vn are then updated to closed and propagated back to make the status of vq also become 
closed, which causes addition of the constraint x V(i = into the set IL Constraints (vi). 

Applying the unary static expansion rule to vj, we connect it to a new simple non-state 
v\2 with Label(v\2) = {A, B, ->A, -*B, . . .}. The status of v\2 is then updated to closed and 
propagated back to make the status of Vj also become closed, which causes addition of the 
constraint x 



With x r . 



into the set ILConstraints{v\) . 
x V5 = x V6 = x V7 = 0, ILConstraints(v\) 



becomes infeasible, and Status(v\) 



becomes closed. Consequently, v receives status closed. By Theorem 3.7 (given later in this 
paper), the considered knowledge base (11, T, A) is unsatisfiable. □ 



3.3 The Tableau Rules 



In this section we formally specify the tableau rules of our calculus Csutq- We also give expla- 
nations for them. They are informal and should be understood in the context of the described 
rule. 
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The Rules for Updating Status of Nodes: 

(UPSi) The first rule is as follows: 

1. if there exists a:l 6 Label(v) or C FullLabel(u) then Status{v) := closed 

2. else if there exists a a G Label(v) then Status (v) := closed 

3. else if Type(v) = non-state, SType(v) = complex, a: (<nR.C) G Label{v) and there are 
bo, . . . ,b n G I such that, for all < i, j < n with z 7^ j, we have that {R(a, 6j : C} C 
FullLabel(t;) and {&; ^ 6j, 6j 7^ 6j} n Label(v) / then Status (v) := closed 

4. else if Type(v) = state, Status (v) = f-expanded and IL Constraints (v) is infeasible then 
Status (v) := closed 

5. else if Type(v) = state, Status (v) = f-expanded and v has no successors then Status (v) := 
open. 

This rule is applied to v only when v was created or modified in the previous step. 

Explanation 1 As stated earlier, informally, closed means "unsatisfiable" and open means 
"satisfiable" in a certain sense. The above rule is thus intuitive. For a formal characterization 



of statuses, we refer the reader to Lemma 4.3 (given on page 22). □ 



(UPS2) The second rule states that, if v is a predecessor of a node w then, whenever the 
status of w changes to closed or open, the status of v should be updated (as soon as possible 
by using a priority queue of tasks). The update is done as follows: 

1. if Type(v) = non-state then 

(a) if some successor of v received status open then Status (v) := open 

(b) else if all successors of v have status closed then 

i. Status (v) := closed 

ii. if Af terTrans(ti) holds, CELabelT(v) = checkingFeasibility, StatePred(v) = u 
then add the constraint x v = into the set ILConstraints(u) 

2. else 

(a) if some successor w of v with CELabelT(w) = testingClosedness received status closed 
then Status{v) := closed 

(b) else if some successor w of v with CELabelT(w) = checkingFeasibility received status 
closed and ILConstraints(v) is infeasible then Status(v) := closed 

(c) else if 

— Status (v) = f-expanded, 

— all successors w of v with CELabelT(w) = testingClosedness have status open, and 

— IL Constraints (v) U {x w = | (v,w) G E, CELabelT(w) = checkingFeasibility and 
Status{w) 7^ open} is feasible 

then Status(v) := open. 

Explanation 2 

— A non-state is like an "or" -node, whose status is the disjunction of the statuses of its 



successors, treating open as true and closed as false. This explains the items la and l(b)i 
A state v is more sophisticated than an "and"-node. Its status is different from closed iff 
the following conditions hold: 

• all of its successors with CELabelT equal to testingClosedness have status different 
from closed, 

• ILConstraints(v) U {x w = | (v,w) G E, CELabelT(w) = checkingFeasibility and 
Status (w) = closed} is feasible. 



The first condition explains the item 2a The second condition explains the item 2b 
because, whenever a successor w of v with CELabelT equal to checkingFeasibility receives 
status closed, the constraint x w = is added into ILConstraints(v) (see the item l(b)ii| ). 



The item 2c is justifiable since the premises of the rule expressed by that item are stronger 



than the conditions listed above. □ 
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The Unary Static Expansion Rule: 

(US) If Type(v) = non-state and Status (v) = unexpanded then 

1. let X = {(a : C) G Label(v) \ C is of the form D n D' or > R.D or < R.D} 

2. let label = Label{v) U_{(a : D), {a : D') \ a : (D n D') G Label{v)} 

U{a:VR.D\ {a: <0 R.D) G Label{v)} 

U {a:ViU? | a:VS..D G Label(v) and i? S 1 } 

U {R~(b,a) | i?(a,o) G Label{v)} 

U {S(a,&) | i?(a,fe) G Label(v) and i? S"} 

U {b:D | {0^^,0,^(0,6)} C Label{v)} 

U {b:\/R.D I {a:\/R.D,R(a,b)} C Label{v) and trans n {R)} 

- (IU RFmls(v)) 

3. if ZafeeZ — Label(v) / then 

(a) ConToSucc(t;, non-state, SType(v), label, RFmls{v) U X, null) 

(b) Status (v) := f-expanded. 

Explanation 3 This rule makes a necessary expansion for a non-state v by connecting it 
to only one successor w which is a copy of w with intuitive changes like: 

— if a : (D n D') G Label (v) then a:(Dn D') in Label(w) is replaced by a : D and a : D' and 
we remember this by adding it into RFmls(w); 

- if {a:\/R.D, R(a,b)} C Label(v) then we add into Label(w); and so on. 

Note that Label(w) — (Label(v) U RFmls{v)) 7^ 0. That is, w; contains some "new" formulas. 
This is to guarantee that the local graph of any non-state is acyclic. □ 



The Rules for Keeping Converse Compatibility: Rules of this kind are listed below in 
the decreasing order w.r.t. priority: 

(KCCi) If (u,v) G E and Status(v) = incomplete then 

1. (we must have that Type(v) = state and Type(u) = non-state) 

2. delete the edge (u, v) from E and re-expand u as follows 

3. if FmlsRC(v) + then 

(a) newLabel := Label (u) U FmlsRC (v) 

(b) ConToSucc(-u, non-state, SType(u), newLabel, RFmls(u), null) 

4. else 

(a) newLabeli := Label{u) U {FmlFB(v)} 

(b) ConToSucc(-u, non-state, SType(u) , newLabeh, RFmls(u), null) 

(c) newLabeli := Label(u) U {FmlFB(v)} 

(d) ConToSucc(u, non-state, SType(u), newLabeh, RFmls(u), null). 

Explanation 4 We have that v is a state with status incomplete and it is the only successor 
of u. The first expansion of u (by connecting to v) was not a good move and we re-expand 
u (only once) as follows. We first delete the edge (u,v). Next, if FmlsRC(v) 7^ (i.e., there 
are formulas that should be added into v), then we connect u to a node with label equal to 
Label (u)U FmlsRC (v) (this node is a replacement for v ). If FmlsRC (v) = then the reason of 
Status(v) = incomplete is that we wanted to have either FmlFB{v) or its negation in Label{v). 
So, in that case we connect u to two successors, one with label Label{u) U {FmlFB(v)} and 
the other with label Label(u) U {FmlFB(v)}. The node v is useful for later: whenever we 
expand a node u' using the forming-state rule by connecting it to v we know immediately 
that we should re-expand it. The other nodes in the local graph of v can be deleted to save 
memory. However, we keep them for our presentation to make the proofs easier. □ 

(KCC2) If Type(v) = state, Status(v) = p-expanded and only the rules for updating status 
and the unary static rule were applied to the nodes in the local graph of v that are different 
from v then 
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1. X : = 

2. for each node w in the local graph of v do 

(a) let wq = ATPred(w) and a = CELabelI(wo) 

(b) X := X U {a : C | there exist R G CELabelR(w ), VR~.C G Label(w) and a : C £ 
FullLabel(w)} 

(c) X := X U {a : ViT.C | G CELabelR{w ) , trans n (R), ViT.C G Label(w) and 
a:VR-.C FullLabel(u)} 

3. if X 7^ then set FmlsRC (v) := X and Status (v) := incomplete. 

Explanation 5 Assume that the considered knowledge base is satisfiable and has a model 
X that satisfies Label(v). Consider the following cases: 

— Case v is a simple state and a = null: Thus, v corresponds to an unnamed individual 
y v G A x , while w corresponds to an i?-successor y w of y v in X. If \/R~ .C G Label(w) 
then: y w G (V-R _ .C) and hence y„ G C" 1 , and for that reason we want to have C in 
FullLabel(u) as a requirement to be realized; so, if C ^ FullLabel(u) then the status 
of f becomes incomplete and we add C into FmlsRC (v) as a concept required for v for 
converse compatibility. If \/R~.C G Label(w) and i? is a transitive role then: R~ is also 
transitive and we also have y v G (\/R~.C) x ; so, analogously, if \/R~.C £ FullLabel(u) 
then the status of v becomes incomplete and we add \/R~ .C into FmlsRC{v). 

— Case v is a complex state and a = a: Thus, v corresponds to an ABox with that indi- 
vidual a. The node w corresponds to an i?-successor y w of a x in I. If Vi? _ .C G Label (w) 
then: y w G (Vi?~ .C) x and hence a x G C T , and for that reason we want to have a : C 
in FullLabel(v) as a requirement to be realized; so, if a : C ^ FullLabel(u) then 
the status of v becomes incomplete and we add a : C into FmlsRC (v) as an assertion 
required for v for converse compatibility. If a : (Vi? _ .C) G Label(w) and i? is a transi- 
tive role then: R~ is also transitive and we also have a x G (\/R~.C) x ; so, analogously, 
if a : (Vi? _ .C) ^ FullLabel(u) then the status of v becomes incomplete and we add 
a: (VR-.C) into FmlsRC {v). □ 

(KCC3) If Type(u) = state, vq is a successor of u with CELabelI{vo) = a and R G 
CELabelR(vo) , and d is a node in the local graph of vq with \/R~.C G Label(v) and 
Status (v) 7^ closed then 

1. if a : C G FullLabel(u) then Status (v) := closed 

2. else if trans-ji(R) and a:3i?~.C G FullLabel(u) then Status (v) := closed 

3. else if (a : C) ^ FullLabel(-u) and Status (u) G {p-expanded, f-expanded} then 
Status (u) := incomplete and FmlFB{u) := (a:C) 

4. else if transn(R) and (a : Vi? _ .C) ^ FullLabel(u) and Status (u) G {p-expanded, 
f-expanded} then set Status (u) := incomplete and FmlFB{u) := {a:\fR~ .C). 

Explanation 6 Assume that the considered knowledge base is satisfiable and has a model X 
that satisfies Label(u). We consider here only the case when u is a simple state and a = null. 
(The case when u is a complex state and a is a named individual is similar, cf. Explanation[5j) 
Thus, u corresponds to an unnamed individual y u G A x . In the constructed tableau, there 
is an expansion path from u via vq to v. The question is: whether that expansion path 
should be taken into account, and if we should consider that expansion path, what should 
be done for converse compatibility. Note that: if CELabelT(vo) = checkingFeasibility and 
(x vo = 0) G ILConstraints(u) then v$ is not used for the construction of X; and if the path 
from vq to v uses some non- unary static expansions then v is just one of possible "expansions" 
of v . 

— If v corresponds to an i?-successor y v of y u in X then y v G (\/R~.C) x (since V-R _ .C G 
Label (v)) and hence y u G C x , which means we should require C G FullLabel(n). So, if 
C G FullLabel(u) then the expansion path from u via vq to v cannot be used and we 
set Status (v) := closed to mark that v cannot be used to realize the requirements of u. 
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— If R is a transitive role and v corresponds to an i?-successor y v of y u in X then we also 
have y u G (\/R~ .C) x , which means we should require \/R~ .C G FullLabel(u). So, if i? is 
transitive and 3i?~.C G FullLabel(u) (note that 3i?~.C is the negation of Vi? _ .C) then 
the expansion path from it via vo to u cannot be used and we set Status (v) := closed to 
mark that v cannot be used to realize the requirements of it. 

— In the other case, if \/R~.C G Label(v) and {C,C} n FullLabel(it) = then we would 
like to have either C or C in Label (u) and therefore set Status (u) := incomplete and 
FmlFB(u) := C (as a concept for branching on at u). 

— In the other case, if R is transitive, \/R~.C G Label(v) and {Vi?~.C, 3i?~.C} n 
FullLabel(it) = then we would like to have either VR~.C or 3R~ .C in Label(u) 
and therefore set Status (u) := incomplete and FmlFB(u) := \/R~.C (as a concept for 
branching on at u). □ 

(KCC4) If u is a state with Status (u) G {p-expanded, f-expanded}, «o is a successor of it with 
CELabelI{vo) = a and i? G CELabelR(vo), v is a node in the local graph of vq such that 
Status (v) / closed and 

— either Label (v) contains <nR~.C, 

— or Label(v) contains >nR~.C or 3R~.C, where R is a numeric role, 
and {(a:C), (a : C)} n FullLabel(u) = 

then set Status (u) := incomplete and FmlFB{u) := (a:C). 

Explanation 7 This rule deals with the case when there lacks information at u for deciding 
how to satisfy the number restrictions of v. We want to have either a : C or a : C in 
FullLabel(u). So, we set Status(u) := incomplete and FmlFB(u) := (a : C) (as a formula 
for branching on at u). □ 

(KCC5) If u is a state with Status (u) = f-expanded, vo is a successor of u with CELabelT(vo) = 
checkingFeasibility, R G CELabelR(vo) and CELabelI(vo) = a, and u is a node in the local 
graph of such that 

— Status (v) 7^ closed, Label(v) contains <mR~.C as well as >nS~.D or 3S~.D, 

— S Qtz R, S <£ CELabelR(v ), a:C G FullLabel(ix), a:D <£ FullLabel(u), 

— {(a:3S.T R ),(a:VS.±)} n Label{u) = 

then set Status (u) := incomplete and FmlFB(u) := (a : 35.T^). 

(Here, T# is T annotated by R. Semantically, is equivalent to T, i.e., ~\\ = T x = A 1 
for every interpretation X. Besides, let = _L and hence 35.T^ = V5.-L.) 

Explanation 8 Assume that Label(v) contains <p which is either > nS~.D (with n > 1) 
or 3S~.D. To realize the requirement ip at v we want to know whether u can be used 
for that purpose. That is, we want (S G CELabelR(vo) and a : D G FullLabel(u)) or 
S (£ CELabelR(vo) or a : D G FullLabel(n). If S G CELabelR(v ) then the will to have 
either a : D or a : D in FullLabel(n) can be realized by the rule (KCC4). If a : D G 
FullLabel(ii) then u cannot be used to realize the requirement (p at v. Consider the case 
when S ^ CELabelR(v$) and a:D ^ FullLabel(u). If v was treated as a state then to realize 
the requirement ip at v we would create an -successor w of v and put D to Label (w). 
As S 1 C-ft R, the node w is also an -successor of v. Since < mR~ .C G Label(v) and 
a : C G FullLabel(u), there may be the need to merge w to u. Such merging would add S 
into CELabelR(vo) . However, our method does not merge nodes explicitly. Roughly speaking, 
we want to decide whether to add S into CELabelR(vo) or not. To solve the problem, we set 
Status{u) := incomplete and FmlFB{u) := (a:3S.T r). Later, if a state u' is a "completion" 
of u, then either a:3S.Tji G Label (u') or a: VS'.-L G Label(u'). If a:\/S.±. G Label (u') then it' 
will not have any S-successor. If a:3S.Tn G Label(u') then it' will have some S*-successor v' 
with T# G Label(v'), and the occurrence of in Label(v') guarantees that the possibility 
of merging v' to any i?-successor of u' will be considered by the transitional full-expansion 
rule. □ 
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The Non-unary Static Expansion Rule: 

(NUS) If Type(v) = non-state and Status (v) = unexpanded then 

1. if a : (C U D) £ Label(v) and {a : C, a : D} n FullLabel(w) = then 

(a) let X = Label{v) - {a : (C U D)} 

(b) let Y = RFmls(v) U{a:(CU D)} 

(c) ConToSucc(i;, non-state, complex, X U {a:C},Y, null) 

(d) ConToSucc(i;, non-state, complex, X U {a : D}, Y, null) 

(e) Status (v) := f-expanded 

Explanation 9 This subrule deals with syntactic branching on a:(C U D) £ Label (v). 
We expand v by connecting it to two successors w\ and W2, whose labels are the label of 
v with a : (C U D) replaced by a : C or a : D, respectively. The formula a:(C U D) is put 
into both RFmls(wi) and RFmlsiwi). The expansion is done only when both w\ and W2 
have a larger FullLabel than v. □ 

2. else if SType(v) = complex, R(a,b) £ Label(v) and 

— either Label(v) contains a:(<nR.C), 

— or Label{v) contains a: (>n R.C) or a:(3R.C), where R is a numeric role, 
and {b:C, b:C} n FullLabel(» = then 

(a) ConToSucc('u, non-state, complex, Label (v) U {b: C}, RFmls(v), null) 

(b) ConToSucc('u, non-state, complex, Label (v) U {6:C}, RFmls(v), null) 

(c) Status (v) := f-expanded 

Explanation 10 This subrule deals with the case when there lacks information about b 
for deciding how to satisfy the number restrictions about a (cf. Explanation [7]) . We want 
to have either b:C or b:C in FullLabel(f ). So, we expand v by semantic branching: we 
connect it to two successors, one with label Label (v) U {b : C} and the other with label 
Label(v) U {b : C}. The expansion is done only when both the successors have a larger 
FullLabel than v. □ 

3. else if S Type (v) = complex, {a: (<nR.C), R{a,b), R(a,b'), b:C, b':C} C FullLabel(u), 
b^b' and {b f b', b' f b} n Label{v) = then 

(a) let X be the set obtained from Label (v) by replacing every occurrence of b' by b 

(b) let Y be the set obtained from RFmls{v) by replacing every occurrence of b' not in 
= expressions by b 

(c) ConToSucc(f;, non-state, complex, X, Y U {b = 6'}, null) 

(d) ConToSucc(f , non-state, complex, Label(v) U {b ^ b'}, RFmls(v), null) 

(e) Status (v) := f-expanded 

Explanation 11 This subrule deals with the case when there lacks information about 
whether b and b' denote the same individual for deciding how to satisfy the number 
restrictions about a. We expand v by semantic branching: either b and b' denote the same 
individual or they do not. Technically, we connect v to two successors with appropriate 



contents. The presence of b = b' at the step 3c is just for making the proofs easier and is 



not needed for correctness and completeness of our CsniQ calculus. □ 
else if SType(v) = complex, {a : (< mR.C), R(a,b)} C Label (v), Label(v) contains 
a:(>nS.D) or a:3S.D with S Q n R, and {S(a, b), ^S(a, b)} n FullLabel(w) = then 

(a) ConToSucc(t;, non-state, complex, Label{v) U {S(a, b)}, RFmls(v), null) 

(b) ConToSucc(-u, non-state, complex, Label(v), RFmls(v) U {-<S(a, b)}, null) 

(c) Status (v) := f-expanded. 

Explanation 12 This subrule deals with the case when there lacks information for 
deciding how to satisfy the number restrictions about a (cf. the rule (KCC5) and Expla- 
nation [8J. We want to decide whether b is an 5-successor of a or not. So, we expand v 
by semantic branching: we connect it to two successors, one with label containing S(a, b) 
and the other with RFmls containing —>S(a,a). The expansion is done only when both 
the successors have a larger FullLabel than v. □ 
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The Forming-state Rule: 

(FSi) If Type(v) = non-state, SType(v) = simple and Status (v) = unexpanded then 

1. let u = StatePred(v), vq = ATPred(v) and a = CELabell (vq) 

2. set X := Label(v) 

3. for each (<nR.D) G Label(v) do 

(a) if FT G CELabelR(v ) and (a:D) € FullLabel(n) then add <{n-l) R.D into X 

(b) else add <nR.D into X 

4. for each (>nR.D) G Label(v) with n > 2 do 

(a) if ft - G CELabelR(v ) and (a:D) G FullLabel(n) then add ^ (n - 1) R.D into X 

(b) else add ^nR.D into X 

5. for each (>li?..D) or 3R.D from Label (v), where R is a numeric role, do 

(a) if R~ <£ CELabelR(v ) or (a:D) £ FullLabel(u) then add hi R.D into X 

6. ConToSucc(w, state, simple, X, RFmls(v), null) 

7. Status{v) := f-expanded. 

Explanation 13 When the rules (UPS), (US) and (KCC) are not applicable (to any node) 
and the rule (NUS) is not applicable to v, we apply this forming-state rule to v by con- 
necting it to a simple state w. Assume that the considered knowledge base is satisfiable 
and has a model X such that the nodes v and w are used for the construction of I. In 
the constructed graph, such a state w is globally cached and may have many predecessors. 
However, the elements y w of the domain of X that correspond to w are nodes in disjoint 



trees (cf. Remark 3.2), and each of them has only one predecessor y u , which corresponds 
to u. When computing contents for w we put into Label(w) the requirements from Label(v) 
after an appropriate modification that takes into account the relationship between y w and 
y u , i.e., the relationship between v and u via Vq. For example, if (< nR.D) G Label (v), 
R~ G CELabelR(vo) and (a : D) G FullLabel(n) then y w G A x (which corresponds to all 
w, v, vo) already has the i?-successor y u G D x , and we have to guarantee only that y w has 
n — 1 other i?-successors satisfying D (i.e., belonging to D x ), and that is why we add into 
Label(w) the requirement ^ (n — 1) R.D. Notice the use of ^ instead of <. Also note that 
we can assume Status (u) ^ incomplete (otherwise, there is no sense for expanding v) and, 
as the rule for keeping converse compatibility is not applicable, in that case either a : D or 
a : D belongs to FullLabel(n). □ 

(FS2) If Type{v) = non-state, SType(v) = complex and Status (v) = unexpanded then 

1. set X := Label{v) 

2. for each a: (<n R.D) G Label{v) do 

(a) let m = (t{6 I {R(a, b),b:D} C FullLabel(v)} 

(b) add a:(<(n-m) R.D) into X 

3. for each (a:C) G Label (v), where C is >nR.D or 3R.D and R is a numeric role, do 

(a) if C = 3R.D then let n = 1 

(b) let m = jt{6 I {R(a, b), b:D} C FullLabel(v)} 

(c) if n > m then add a : (y (n — m) R.D) into X 

4. ConToSucc(v, state, complex, X, RFmls(v), null) 

5. Status (v) := f-expanded. 

Explanation 14 When the rules (UPS), (US), (KCC) and (NUS) are not applicable to the 
complex non-state v, we apply this forming-state rule to v by connecting it to a complex state 
w. When computing contents for w we put into Label(w) the requirements from Label(v) after 
an appropriate modification that takes into account the assertions in Label(v) that represent 
the relationship between named individuals. For example, if a : (< nR.D) G Label{v) and 
there axe Til pairwise different individuals 61, . . . , b m such that {R(a, b{), b{ :D \ 1 < i < m} C 
FullLabel(f ) then we add into Label(w) the requirements a: (n — m) R.D). Notice the use 
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of ^ instead of <. Note that, since the rule (NUS) is not applicable to v, we must have that 
(bi ^ bj) G Label(v) for any pair i ^ j, and for any individual b such that R(a, b) G Label (v), 
either b : D or b : D must belong to FullLabel(v). When expanding w we will not have to 
pay attention to the relationship between the individuals occurring in Label(w). □ 

The Transitional Partial-Expansion Rule: 

(TP) If Type(v) = state and Status (v) = unexpanded then 

1. for each (a:3R.D) G Label(v), where R is a non-numeric role, do 

(a) X := {D} U {£)' | a:\IR.D' G Label(v)} U 

{VS.D' | a-.VS.D' G Label(v), RQ n S and trans n (S)} U T 

(b) ceLabel := (testingClosedness, {S 1 | R Qn S},a) 

(c) NewSucc(w, non-state, simple, X, 0, ceLabel) 

2. Status(v) := p-expanded. 

Explanation 15 To realize a requirement a:3R.D at t>, where R is a non-numeric role, we 
connect v to a new simple non-state w with appropriate contents as shown in the rule. □ 

The Transitional Full-Expansion Rule: 

(TF) If Type(v) = state and Status (v) = p-expanded then 

1. £ ■= 0, £' ■= 

2. for each (a:>znR.D) G Label(v) do 

(a) X :={S\RQ n S} 

(b) Y := {D} U {D 1 \ a:\fR.D 1 G Label{v)} U 

{iS.D' | a-.VS.D' G Label(v), RQ n S and £rans^(S)} U T 

(c) £:=£u{<X,Y,a>} 

3. for each a:{-<n R.C) G Label{v) do 

(a) for each (X, Y, a) G £ do 

i. if ReX and {C,C}nY = then 5' := £' U {(X, Y U {C}, a), (X, Y U {C}, a)} 
(i.e., (X, Y, a) is replaced by (X, Y U {(7}, a) and {X, Y U {<7}, a)) 

ii. else £' := £' U {(X, Y, a)} 

(b) £ := £' := 

4. repeat 

(a) for each ct:(<nR.C) G Label (v), {X, Y, a) G £ and (X', Y',a) G £ such that R G X, 
C G Y, i? G X', C G Y', (X U X', Y U Y', a) £ £ and Y U Y' does not contain any 
pair of the form tp, Tp do add (X U X', Y U Y', a) into £ (i.e., the merger of (X, Y, a) 
and (X', Y', a) is added into £) 

(b) for each (X, Y, a) G £, (X, Y',a) G £ and R G X n X' such that T R G Y U Y', 
(X U X', Y U Y', a) £ and Y U Y' does not contain any pair of the form ip, Tp do 
add (X U X', Y U Y', a) into £ 

until no tuples were added into £ during the last iteration 

5. for each (X, Y, a) G £ do 

(a) NewSucc(w, non-state, simple, Y, 0, (checkingFeasibility, X, a)) 

6. let W = {w \ (v,w) e E and CELabelT(w) = checkingFeasibility} 

7. ILConstraints{v) := > | iy G IY} 

8. for each (a:C) G Label(v) do 

(a) if C is of the form ^nR.D then add into IL Constraints (v) the constraint 
Y.{x w \w eW, CELabelI(w) = a,Re CELabelR(w), D G Label(w)} > n 

(b) if C is of the form <nR.D then add into ILConstraints{v) the constraint 
Y.{x w \w eW, CELabelI(w) = a,Re CELabelR(w), D G Label{w)} < n 

9. Status (v) := f-expanded. 
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Explanation 16 To satisfy a requirement (p = (a: ^nR.C) G Label(v), one can first create 
a successor w v of v specified by the tuple (X, Y, a) computed at the step[2j where X presents 
CELabelR(w ip ), Y presents Label(w v ) and a presents CELabelI(w v ), and then clone w v to 
create n successors for v (or only record the intention somehow). The label of contains 
only formulas necessary for realizing the requirement a:3R.C and related ones of the form 
oc.VR'.C at v. To satisfy requirements of the form a:^n' R'.C at v, where R C-^ R' , we 
tend to use only copies of w v extended with either C or C (for easy counting) as well as 
the mergers of such extended nodes. So, we first start with the set £ constructed at the 
step[2j which consists of tuples with information about successors to be created for v. We 
then modify £ by taking necessary extensions of the nodes (see the step [3]) . After that we 
continue modifying £ by adding to it also appropriate mergers of nodes (see the step El) . 
The merging specified at the step [4b] corresponds to the rule (KCC5) with Explanation[8j 
Successors for v are created at the step[5j The number of copies of a node w that are intended 
to be used as successors of v is represented by a variable x w (we will not actually create such 
copies). The set ILConstraints(v) consisting of appropriate constraints about such variables 
are set at the steps [6]{8) □ 



3.4 Properties of Cs-^xQ-Tableaux 

Define the size of a knowledge base KB = (TZ, T , A) to be the number of bits used for the usual 
sequential representation of KB. It is greater than the number of symbols occurring in KB. If N 
is the size of KB and <nR.C or >nR.C is a number restriction occurring in KB then n < 2 N . 

Lemma 3.6. Let (TZ, T , A) be a knowledge base in NNF of the logic SH.TQ and let N be the size 
of (7Z,T, A) . Then a CsuxQ-tableau for (TZ,T,A) can be constructed in (at most) exponential 
time in N. □ 

Theorem 3.7 (Soundness and Completeness). Let (1Z,T,A) be a knowledge base in NNF 
of the logic SHXQ and G = (V,E,u) be an arbitrary Csuxq -tableau for (TZ,T,A). Then 
(TZ,T,A) is satisfiable iff Status (u) / closed. □ 

See the next section for the proofs of the above lemma and theorem. 

To check satisfiability of (TZ, T, A) one can construct a C^jg-tableau for it, then return "no" 
when the root of the tableau has status closed, or "yes" in the other case. We call this the CsniQ- 
tableau decision procedure. The corollary given below immediately follows from Theorem |3 . 7| and 
Lemma 13.61 

Corollary 3.8. The CsHXQ'^ a ^ eau decision procedure has ExpTime complexity. □ 



4 Proofs 



4.1 Complexity 

Define closure(7£, T,A) to be the smallest set T of formulas such that: 

— all concepts (and subconcepts) used in (TZ,T,A) belong to T, 

— if R, S are numeric roles and S R then 35.Tr, V5.-L, Tr and _L belong to T, 

— if V5.C7 £ T and R C w Sthen \/R.C G F, 

— if <0 R.C£T then Vii.C G T, _ 

— if C £ T and C is not of the form <nR.C nor ^nR.C then C G T, 

— if 3R.C G r and R is a numeric role then ^ 1 R.C G T, 

— if > n R.C G r and < m < n then y(n — m) R.C G T, 

— if <n R.C G T and < m < n then <(n-m) R.C G T, 

— all assertions of A belong to T, 
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— if C G r and a is an individual occurring in T then a:C G -T, 

— if 6 and 6' are individuals occurring in J 1 then b = b' and b b' belong to i" 1 , 

— if i?(a, b) £ r then R~(b, a) and -ii?(a, 6) belong to 7 1 , 

— if fl(o, 6) G r and RQ n S then 5(a, 6) G r, 

— if fl(a, 6) G r and 5 R then 5(o, 6) G T. 

Lemma 4.1. T/ie number of formulas o/closure(7£, T, A) is of rank 0(N 3 ) ; where N is the size 
of(K,T,A). □ 

The proof of this lemma is straightforward. 

We recall below Lemma |3.6| before presenting its proof. 



Lemma 3.6[ Let (1Z, T, A) be a knowledge base in NNF of the logic SHTQ and let N be the size 



of (1Z,7~, A) . Then a C suxQ-tableau for (R,, T, A) can be constructed in (at most) exponential 
time in N. 

Proof. Let's construct any Cskzq -tableau G = (V,E,v) for (1Z,T,A). 

Let N' be the number of formulas of closure(7£, T,A). We have N' = 0(N 3 ). For each v G V, 
Label(v) C c\osuve(1Z,T,A). Since states of G are cached, it follows that G has no more than 
2 N states. Each state has no more than 0(2 N • 2 N • N) successors. If v is a successor of a state, 
then nodes in the local graph of v are cached and hence there are no more than 2 N of them. 
Therefore, G has 0(2-^ N )) nodes, where /(N) is a polynomial of N. 

Checking feasibility of IL Constraints (v) for a state v is an IFDL(N, 2 N • 2 N ' • N, N)-problem, 



and by Lemma 2.1, can be solved in (at most) exponential time in N. Thus, checking whether a 
rule is applicable and applying a rule can be done in time 0(2 9 ^), where g(N) is a polynomial 
of N. 

Choosing a node to expand can be done in polynomial time in the size of the graph. As each 
node is re-expanded at most once (for converse compatibility), we conclude that the graph G 
can be constructed in (at most) exponential time in N. □ 



4.2 Soundness 

Lemma 4.2. Let G = (V,E,u) be a C suxQ-tableau for (1Z,T,A). Then, for every sim- 
ple node v £ V, FullLabel(w) is equivalent to Label (v). That is, for any interpretation I, 
(FullLabel^)) 1 = (Label (v)) x . □ 

The proof of this lemma is straightforward. 

Let G be a Cs-^jg-tableau for (1Z, T,A). For each node v of G with Status(v) G {incomplete, 
closed, open}, let DSTimeStamp(v) be the moment at which Status(v) was changed to its final 
value (i.e., determined to be incomplete, closed or open). DSTimeStamp stands for "determined- 
status time-stamp". For each non-state v of G, let ETimeStamp(v) be the moment at which v 
was expanded the last timej^] 

For a simple non-state v with Af terTrans(f ) = true, StatePred(v) = u and CELabell (v) = a, 
we define CEFullLabelR(v) to be CELabelR(v) extended with all —>S such that: 

— S i CELabelR(v) and S Q n R for some R G CELabelR(v), 

— some node w in the local graph of v has Label(w) containing <mR~ .C as well as 3S~.D or 
>nS~.D with n > 0, 

— a:C G FullLabel(ii) and a:D £ FullLabel(u). 

For X = {a:C l ,...,a:C n }, let Cnj(X) = a: (d n . . . n C n ). 
Lemma 4.3. Let G = (V, E, v) be a C suxQ-tableau for (1Z, T, A) . For every v G V : 

4 Each non-state may be re-expanded at most once (for making converse compatibility) and each state is ex- 
panded at most once. 
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1. if Status (v) = closed then 

(a) case Type(v) = state and SType(v) = simple : for any predecessor u of v and for uq = 
StatePred(u) , u\ = ATPred(u) , we have that: 

i. if Status (uq) 7^ incomplete and SType(uo) = simple then there do not exist any model 
I of both 1Z and T and any elements x,y G A x such that x G (FullLabel(tio)) 2 ', 
y G (Label (v)) x , {x,y) G R x for all R G CELabelR(ui) , and (x,y) £ R x for all 
(-.i?) G CEFullLabelR(ui), 

ii. if Status (uq) 7^ incomplete and SType(uo) = complex then there do not exist any model 
X of (TZ, T, FullLabel(uo)) and any element y G A x such that: y G (Label(v)) x , and 
for x = (CELabelI(ui)) x , (x,y) G R x for all R G CELabelR(m) , and (x,y) <£ R x for 
all (^R) G CEFullLabelR(ui), 

(b) case Type(v) = state and SType(v) = complex : FullLabel(u) is unsatisfiable w.r.t. TZ 
and T, 

(c) case Type(v) = non-state and StatePred(v) = null : FullLabel(?j) is unsatisfiable w.r.t. TZ 
and T ', 

(d) case Type(v) = non-state, u = StatePred(v) 7^ null and SType(u) = simple : if Vq = 
ATPred(v) then there do not exist any model I of both 7Z and T and any elements 
x,y G A x such that x G (FullLabel(ii)) :r ; y G (Label (v)) x , (x,y) G R x for all R G 
CELabelR(vo) , and (x,y) £ R x for all (->R) G CEFullLabelR(t;o), 

(e) case Type(v) = non-state, u = StatePred(v) ^ null and SType(u) = complex : if vo = 
ATPred(v) then there do not exist any modelX of (1Z, T, FullLabel('u)) and any element 
y G A x such that: y G (Label (v)) x , and for x = (CELabelI(vo)) x , (x,y) G R x for all 
R G CELabelR(vo) , and (x,y) <fc R x for all (->R) G CEFullLabelR(u ), 

2. if Status (v) = incomplete, Type(v) = state and FmlsRC(v) 7^ then FullLabel(u) U 
{-■Cnj (FmlsRC(v))} is unsatisfiable w.r.t. 1Z andT , 

3. if Type(v) = non -state and w\ , . . . , Wk are all the successors of v then, for every model I of 
1Z and every x G A 1 , 

(a) case SType(v) = simple : x G (FullLabel(w)) :r iff there exists 1 < i < k such that 
x G (FullLabeH^i)) 1 , 

(b) case SType(v) = complex : X is a model of FullLabel(i>) iff there exists 1 < i < k such 
that I is a model o/FullLabel(u;i). 

Proof. We prove this lemma by induction on both DSTimeStamp(v) and ETimeStamp(v) . 



Consider the case l(a)i when v gets status closed because ILConstraints(v) is infeasible. For 



this case, we prove the contrapositive. Suppose that: 

Type(v) = state, SType(v) = simple, (u,v) G E, uq = StatePred(u) , u\ = 
ATPred(u), Status(uo) 7^ incomplete, SType(uo) = simple, I is a model of both 
K and T, x G (FullLabel^o)) 1 , y G (Label (v)) x ', (x,y) G R x for all R G 
CELabelR(ui), and (x,y) <£ R x for all (-.#) G CEFullLabelR(-ui). 



(1) 



We show that IL Constraints (v) is feasible. Without loss of generality, assume that I is finitely- 
branching. Thus, the set Z = {z G A x | z 7^ x, (y, z) G R x for some R G R U R- - } is finite. Let 
us compute a solution S for LLConstraints(v) as follows. 

1. For each successor w of v, set n w := 0. 

2. For each z G Z do: 

(a) let w\, . . . , Wk be all the successors of v such that, for each 1 < i < k : 

i. CELabelT(wi) = checkingFeasibility, 

ii. z G (Label(wi)) x , 

iii. (y,z) G R x for all R G CELabelR(wi), 

iv. Wi is "maximal" in the sense that there does not exist any successor w[ 7^ Wi of v 
such that 
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- Label (w'i) 5 Label(wi) and CELabelR(w' i ) D CELabelR(wi 

- CELabelT (w[) = checkingFeasibility, 

- z G (Label (w'i)) 1 , 

- (y, z) G R x for all i? G CELabelRiw^); 
(b) for each 1 < i < k, set n Wi := n Wi + 1. 

3. 5q := {x w = n w \ w is a successor of u}. 



4. Let Tifi, . . . , Wj- be all the successors of v defined as in the step 2a for the case z = x. 

5. For each 1 < i < k do: 

(a) if there exists ^nS.D G Label(v) such that S G CELabelR(wi) , D G Label(wi), S~ ^ 
CELabelR(u\) and L> ^ FullLabel(u ) then 
i. set := + 1. 

6. S := {x w = n w \ w is a successor of 

We prove that 5 is a solution for IL Constraints (v) . 

We first show that, for any Wi at the step 2a or |4j (y, z) ^ S x for all G 



CEFullLabelR^). Let ( _| <S) G CEFullLabelR(?x;j). Thus, there exist -R, w', to, C, n, D such 
that: S Q-ji R, R G CELabelR(wi), w' is a node in the local graph of u>j, Label (w 1 ) contains 
<mR~.C as well as 35". £> or >nS~.D with n > 0, C G FullLabel(u) and D <£ FullLabel(v). 
As Status (v) 7^ incomplete and the rule (KCC5) was not applicable to w' , either 3S.Tr or VS'.L 
must belong to Label(v). If VS._L G Label(v) then, since y G (Label(v)) x , we have that y G 
(VS.X) 1 and therefore (y, z) ^ S x . Suppose 3S.Tr G Label (v). If (y, z) G S x then, by the nature 
of the transitional full-expansion rule and the maximality of u>i, we have that Tr £ Label(wi) 
and S G CELabelR(wi), which contradicts the assumption (—>S) G CEFullLabelR(wj). Therefore, 
(y,z)tS x . 

We now show that if a constraint x w = was added into IL Constraints (v) because w 
got status closed then n w was not increased and hence must be 0. For the contrary, suppose 
the constraint x w = was added into ILConstraints(v) (because w got status closed) and 
n w was increased at least once. Thus, there exists z G Z U {x} such that z G (Label(w)) x 
and (y, 2) G i?" 1 for all R G CELabelRivS) . By the assertion stated in the above paragraph, 
we also have that (y,z) g S x for all (->S) G CEFullLabelR(u>). By (fll, we have that y G 



(Label(v)) and SType(v) = simple, and by Lemma 4.2, it follows that y G (FullLabel(u)) 



\1 



This situation contradicts the inductive assumption Id (with v, Vq, u, x, y replaced by w, w, v, 
y, z, respectively). Therefore, every constraint x w = from IL Constraints (v) is satisfied by the 
solution 5. 

Consider a concept ^ n S.D G Label (v) and the corresponding constraint Y2i x w I S G 
CELabelR(w) , D G Label(w)} > n of ILConstraints(v). There are the following cases: 

- Case > (n + I) S.D G Label(v), S~ G CELabelR(u{) and D G FullLabel(u ): By Q, we 
have that y G (> (n+1) S.D) X , (y, x) G S" 1 and x G -D 1 . Hence, Z contains pairwise different 
Z\,...,z n such that (y, zi) G S' 2 ' and z% G -D 2 " for all 1 < i < n. Each makes n„ increased 
by 1 for some successor w of v with S G CELabelR(w) and D G Label(w). It follows that the 
considered constraint is satisfied by the solution S. 

- Case (>nS.D G Label(v) or (35.D G Label(v) and n = 1)) and Z> G FullLabel(u ): By 0, 
we have that y G (> nS.D) x and x ^ D- 1 . Analogously to the above case, the considered 
constraint is satisfied by the solution S. 

- Case (> nS.D G Label(v) or (3S.D G Label(v) and n = 1)), 15 ^ FullLabel(n ) 
and S~ G CELabelR(u\): By the rule (KCC4), G FullLabel(tio), which implies that 
> (n + 1) 5.D G Label(v). Thus, this case is reduced to the first one. 

- Case (> nS.D G Label(v) or (3S.D G Label(v) and n = 1)), D ^ FullLabel(no) and 
5- ^ CELabelR{ui): By Q, we have that y G (> nS.Df. If ^ S x or x i D x 
then, analogously to the first case, the considered constraint is satisfied by the solution S. 
Assume that (y, x) G S x and x G D" 1 . We have that Z U {x} contains pairwise different 
z\ = x, Z2, ■ ■ ■ , z n such that (y,Zi) G S x and G -D" 1 , for 1 < i < n. Each z\ makes n w 
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increased by 1 for some successor w of v with S £ CELabelR(w) and D £ Label(w). It 
follows that the considered constraint is satisfied by the solution S. 

Consider a concept ^ mR.C G Label(v) and the corresponding constraint Yl{ x w I R G 
CELabelR(w), C £ Label(w)} < m of IL Constraints (v). There are two cases: 

- case (<mR.C) £ Label (v), (2) 

- case (< (m + 1) R.C) £ Label (v), R~ £ CELabelR(ui) and C £ FullLabel(u ). (3) 

Consider the first case, i.e., assume that Q holds. By 0, we have that y £ (<mR.C) x . 
Hence, Z U {x} contains no more than m elements z such that (y, z) £ R x and z £ C x . Due 
to the "maximality" of w and the nature of the transitional full-expansion rule, for such a z 
there exists at most one successor w of v such that R £ CELabelR(w), C £ Label{w) and the 
consideration of z causes n w to be increased by 1. (Also, such an n w is increased only due to 
such a z.) Therefore, the considered constraint is satisfied by the solution S. 

Consider the second case, i.e., assume that @ holds. By 0, we have that 
y £ (< (m + 1) R.C) X , (y,x) £ R x and x £ C x . Hence, Z contains no more than m elements 
z such that (y, z) £ R x and z £ C . Due to the "maximality" of w and the nature of the 
transitional full-expansion rule, for such a z there exists at most one successor w of v such that 
R £ CELabelR(w), C £ Label(w) and the consideration of z causes n w to be increased by 1. 
(Also, such an n w is increased only due to such a z.) Therefore, the considered constraint is 
satisfied by Sq. To prove that it is also satisfied by S, it suffices to show that if n w% was increased 



at the step|5(a)i (in the construction of S) then R ^ CELabelR{wi) or C ^ Label{wt 



For the contrary, suppose that n Wi was increased at the step 5(a)i and 



R £ CELabelR(wi) and C £ Label(wi). (4) 



As the condition of the step 5(a)i 



there exists y nS.D £ Label (v) such that S £ CELabelR(wi), D £ Label(wi), , . 
S~ £ CELabelR(ui), D £ FullLabel(n ), and hence (y,x) £ S x and x £ D x . ^ ' 

Since S~ £ CELabelR(m) (by @) and R~ £ CELabelR{ Ul ) (by g), we have that R £k S. 
Consider the case S %n R. Since both S and R belong to CELabelR(wi) (by ^ and Q), 
there exist roles 

i?o = R, Ri, . . . , Rh-i,Rh = S and Si, ... , Sh, all belonging to CELabelR(wi) (6) 
such that, for every 1 < j < h: 

— Sj Rj-i and Sj Rj, (7) 

— Label(v) contains BSj.D'j or >n,j Sj.D'- for some D'- £ Label{wi) and rij > 0, (8) 

— if j < h then Label(v) contains <mj Rj-C'j for some Cj £ Label(wi) and rrij. (9) 

For each j from 1 to h, observe that: 



since Sj £ CELabelR(wi), by the step[4]and the step 2(a)iii (with z = x) in the construction 
of the solution 5, we have that 

(y,x)£S x (10) 

if SJ i CELabelR{ Ul ) then 
• (—iSj) £ CEFullLabelR(ui) because one can apply the definition of CEFullLabelR (with 
u, v, w, a, S, R, m, C, n, D replaced, respectively, by no, u\, u, null, Sj, Rj-±, mj-i, 
C'j_ 1 , rij, D'J) due to the following reasons: 
* by Q, Af terTrans(ui) = true and StatePred{u\) = uq, 



26 L.A. Nguyen 



Sj ^ CELabelR(ui) (by the premise of the above "if" clause), 
S7 c R~, 



G CELabelR{u\) since 

• if j = 1 then Rj^ = R Q = R~ (by g) and iT € CELabelR( Ul ) (by Q), 

• if j > 1 then € CELabelR{ui) by induction of (11) as shown below, 
by ([!]), u is a node in the local graph of u\ and, since {u,v} G E 1 and u is a state, 



like Label(v), Label(u) contains < rrij-x i?j_i.C'_ 1 (by (p3|) and 



m 



to + 1) as well as BSj.D', or >nj Sj.D', with > (by (8)) 



, using Cq = C and 



* since Rj_\ £ CELabelR(u\) (as above), (< m./_i i^-i.Cj^) € Label(u) (as above) 

and Status(uo) / incomplete (by ( 1 )), by the rule (KCC4), either C^_ x or Cj_i belongs 
to FullLabel(no), 

* if j > 1 then, since Cj_ 1 € Label(wi) (by ([9])), by the step |4] and the step 
(with z = x) in the construction of the solution 5, we have that x £ (C"-_i) 



2 a)ii 



hence, 

g 



C we have that Cj_i G 



by (1), C'-_2 ^ FullLabel(no), and by the assertion in the above item, Cj_ 1 
FullLabel(uo)) 

* if j = 1 then, since C £ FullLabel(u ) (by Q), for C' 
FullLabel(tio), 

* since D'- G Label(wi) (by ([8])), by the step |4] and the step 2(a)ii (with z = x) in 
the construction of the solution S, we have that x G {D'-) x , hence, by (JlJ), ^ 
FullLabel(uo); 

since ipSj) G CEFullLabelR(ui) (shown above), by dxh , (y, x) £ Sj, which contra- 



dicts (10); 



hence S 1 - G CELabelR(u\) , and by (|7 



it follows that 



i?J G CELabelR{ui) 



(11) 



and 



As a consequence, for j = h, we have that G CELabelR(u\). Since S/, i?^ (by ([7|) 
Rh = S (by Q), it follows that S~ G CELabelR(u\) , which contradicts ([5]). 

Now consider the case 5 Q-ji R. One can derive (—>S~) G CEFullLabelR(ui) by applying the 
definition of CEFullLabelR (with u, v, w, a, S, R, to, n replaced, respectively, by no, u\, u, 
null, S~ , R~ , m + 1, and some n') due to the following reasons: 

— by ([T]), Af terTrans(ui) = true and StatePred(u\) = uq, 

— S' i CELabelR( Ul ) (by g), S~ C TC R~ (since S Q n R), R~ £ CELabe\R(u x ) (by (g)), 

— by (JTJ) , u is a node in the local graph of u\ and, since (u, v) £ E and t> is a state, like Label(v), 
Label(u) contains (< (m + 1) R.C) (by ([3])) as well as 3S.D or >n' ,S.Z) for some n' > (since 
^nS.D £ Label(v) - by j[5|)), _ 

— C G FullLabel(ii ) (by @) and I) ^ FullLabel(u ) (by (jH])). 

By it follows that (y,x) ^ S x , which contradicts ( 5|. 

We have proved the induction step for the case l(a)i when v gets status closed because 



IL Constraints (v) is infeasible. The case l(a)ii when v gets status closed because IL Constraints (v) 
is infeasible can be dealt with in a similar way, using the following modifications, with a = 
CELabelI{u\) (and thus x = a x ): 

— The assumption ([I]) is modified by changing u SType(uo) = simple" to u SType(uo) = complex" 
and changing "X is a model of both 1Z and T, x £ (FullLabel(uo)) 2 ' " to "X is a model of 
{K,T, FullLabel(uo))". 

— ll D £ FullLabel(uo)" is replaced by il a:D £ FullLabel('Uo)" , and similarly for other cases 
with another concept in the place of D and/or with ^ instead of G. 

— The phrase "either C'j_ 1 or C'-_ l belongs to FullLabel(uo)" is replaced by "either a:C'j_ 1 

or a:C'j_ 1 belongs to FullLabel(«o)" . 
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The phrase "u, null" is replaced by u u, a r 



Now consider the case lb when v gets status closed because ILConstraints(v) is infeasible. 
For this case, we prove the contrapositive. Suppose that Type(v) = state, SType(v) = complex 
and FullLabel(w) is satisfiable w.r.t. 1Z and T ■ We show that ILConstraints(v) is feasible. 
Let I be a finitely-branching model of 1Z, T and FullLabel(f ). We compute a solution S for 
IL Constraints (v) as follows. 

1. For each successor w of v, set n w := 0. 

2. For each individual a occurring in A and each z E A x such that (a x ,z) E R x for some 
R E R U R do: 

(a) let iui , . . . , wj~ be all the successors of v such that, for each 1 < i < k : 

i. CELabelT(wi) = checkingFeasibility and CELabelI(wi) = a, 

ii. z E (Label (wi)) x , 

iii. (a x ,z) E i? 1 for all R E CELabelR(wi) , 

iv. iUj is "maximal" in the sense that there does not exist any successor w\ ^ Wi of v 
such that 

- Label(wQ 5 Label(wi) and CELabelR{w' t ) 5 CELabelR{wi), 

- CELabelT(w' i ) = checkingFeasibility and CELabell {w'j) = a, 

- z E (LafceZK)) 1 , 

- (a x ,z) E for all R E CELabelRiw'^; 

(b) for each 1 < i < k do 

i. if z 7^ 6" 1 for all 6 occurring in „4 then n Wi := n Wi + 1; 

ii. else if z = b^ for some b occurring in A and there exists a: (>znS.D) E Label(v) such 
that S E CELabelR(wi), D E Label(wi) and S(a,b) ^ Label (v) then n^. := n TOj + 1. 

3. 5 := {x w = n w | w is a successor of v}. 

We prove that 5 is a solution for ILConstraints(v) . 

We first show that, for any W{ at the step 2a (a 1 , z) ^ S" 1 for all (—<S) E CEFullLabelR(u>j). 



Let (~<S) E CEFullLabelR(?i;j). Thus, there exist R, w', m, C, n, D such that: S Qtz R, 
R E CELabelR(wi) , if' is a node in the local graph of Wi, Label (w 1 ) contains < mR~.C as 
well as 3S~.D or >nS~.D with n > 0, a : C E FullLabel(u) and a:D £ FullLabel(u). As 
Status (v) 7^ incomplete and the rule (KCC5) was not applicable to w' , either a : 3S.Tr or a : \/S.T 
must belong to Label (v). If (a:V5._L) E Label(v) then a- 1 E (VS'._L) :r and therefore (a ,z) £ S x . 
Suppose (o : 3S.Tr) E Label (v). If (a x ,z) E S' 2 ' then, by the nature of the transitional full- 
expansion rule and the maximality of we have that T^j E Label(wi) and 5 E CELabelR(wi) , 
which contradicts the assumption ( _, «S') E CEFullLabelR(ii;j). Therefore, (a x ,z) ^ S^. 

We now show that if a constraint x w = was added into IL Constraints (v) because «; 
got status closed then n w was not increased and hence must be 0. For the contrary, suppose 
the constraint x w = was added into ILConstraints(v) (because w got status closed) and 
n w was increased at least once. Thus, there exists z E A x such that z E (Label(w)) x and 
(a x , z) E R x for all R E CELabelR(w). By the assertion stated in the above paragraph, we also 
have that (a x , z) ^ S x for all (~<S) E CEFullLabelR(?x;). This situation contradicts the inductive 



assumption le (with v, vo, u, x, y replaced by w, w, v, a x , z, respectively). Therefore, every 
constraint x w = from ILConstraints(v) is satisfied by the solution S. 

Consider a concept (a :>z nS.D) E Label(v) and the corresponding constraint Yl{ x w \ 
CELabell (w) = a, S € CELabelR(w), D E Label(w)} > n of ILConstraints(v). Let m = | 
{5(a, 6),6 : -D} C FullLabel(?;)}. We have that (a : > (n + m) S.-D) E Label (v). Since X is a 
model of FullLabel(u), there exist pairwise different z\, ... , z n+m such that (a x , Zi) E and 
Zi E -D" 1 for all 1 < % < n + m. Note that, if S(a, b) E Label(v) then, by the rule (KCC4), either 
b:D£ FullLabel(w) or b:D E FullLabel(w). Since E -D" 1 and X is a model of FullLabel(t;), 
if zi = b 1 then b : D ^ FullLabel(u). Therefore, for every I < i < n + m, if z^ = b x and 
S(a, b) E Label (v) then 6:D E FullLabel(v). Let Z = {21, . . . , z n+m \ \ {b x \ S(a, b) E Label(v)}. 
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We have that fjZ = n. Each z from Z makes n w increased by 1 for some successor w of v 
with CELabelI(w) = a, S G CELabelR{w) and D G Label (w). It follows that the considered 
constraint is satisfied by the solution S. 

Consider a concept (a :X nR.C) G Label (v) and the corresponding constraint XX ^ I 
CELabell (w) = a, R G CELabelR(w), C G Label(w)} < n of IL Constraints (v). Let m = | 
{-R(a, 6), 6 : C} C FullLabel(u)}. We have that (a : < (n + m) R.C) G Label(v). Since X is a 
model of FullLabel(u), it follows that a x G (< (n + m) R.C) 1 . Let Zi = {ft 1 | {i?(a, 6), fr:C} C 
FullLabel(v)}. Due to the subrule[3]of (NUS), we have that (jZi = m. 

Note that if u; is a successor of v, CELabell (w) = a, R G CELabelR(w) and C G Label(w) 
then is increased only due to some z such that (a 1 , z) G i? 1 and 2 G C 1 . Due to the 
"maximality" of w and the nature of the transitional full-expansion rule, for such a z there exists 
at most one successor w of v such that CELabell (w) = a, R G CELabelR(w) , C G Label{w) and 
the consideration of z causes n m to be increased by 1. Since a x G (< (n + m) R.C) 1 , to prove 
that the considered constraint is satisfied by the solution 5, it suffices to show that if z G Z\ 



causes n Wi to be increased by 1 at the step 2(b)ii then R ^ CELabelR(wi) or C ^ Label(wi). 
Suppose the contrary. We have that: 

- {a: <(n + m) R.C, R(a,b),b:C} C PuULabel(v), (12) 

- tOj is a successor of v, CELabelT(wi) = checkingFeasibility and CELabell (wi) = a, (13) 

- b x G (Label( Wi )f and (a z , 6 Z ) G (R'f for all i?' G CELabelR{ Wi ), (14) 

- a:(hnS.D) G Label(v),S G CELabelR(wi) , D G Label(wi) and S(a,6) ^ Label(v), (15) 

- i? G CELabelR(wi) and C G Label(wi). (16) 



Since both 5 and i? belong to CELabelR{wi) (by (15) and (16)), there exist roles 

Ro = R, Ri, . . . , Rh-i, Rh = S and Si, . . . , 5^, all belonging to CELabelR{wi) (17) 
such that, for every 1 < j < h: 

— Sj Qtz Rj-i and 5j (18) 

— Label(v) contains a:3Sj.D'j or a: >nj Sj.D'- for some Z)^ G Label{wi) and nj > 0, (19) 

— if j < h then Label(v) contains a: <mj Rj-C'j for some C'- G Label(wi) and my. (20) 

Note that the subrule |2j of (NUS) was not applicable to v. Having ( |12[ ), (|17[), ( |18[ ) and 



(19), we derive that Si(a,b) G Label(v) or -i5i(a, b) G FullLabel(w). Since 



17) and (M4L 



Since I is a model of FullLabel(?;), it follows that —>Si(a,b) ^ FullLabel(w), 



and hence S\(a,b) G Label{v). Since 5i E -Ri (by (18)), by the rule (US), we also have that 



R\(a,b) G Label (v). Analogously, using also (20), for every j from 1 to h, we can derive that 



Sj(a,b) G Label(v) and Rj(a,b) G Label (v). Since 5 = Rh, it follows that S(a,b) G Label(v), 



which contradicts (15). This completes the induction step for the case lb when v gets status 
closed because ILConstraints(v) is infeasible. 

The induction steps for the other cases are straightforward. □ 

Corollary 4.4 (Soundness of Cshiq)- If G = (V,E,u) is a CswiQ-tableau for (71, T, A) 
and Status^) = closed then (JZ,T,A) is unsatisfiable. □ 



This corollary follows from the assertion [Tc] of Lemma 4.3 



4.3 Completeness 

We prove completeness of CsniQ y i a model graphs. The technique has been used for other logics 
(e.g., in |34p6|22|5] ). A model graph (also known as a Hintikka structure) is a tuple (A, I, C, E), 
where: 
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— A is a non-empty and finite set, 

— I is a mapping that associates each individual name with an element of A, 

— C is a mapping that associates each element of A with a set of concepts, 

— IE is a mapping that associates each role with a binary relation on A. 

A model graph {A, I, C, E) is consistent and IZ-saturated if every x £ A satisfies: 



- C(x) does not contain _L nor any pair C, C (21) 

- if (x,y) G E(R) then (y,x) E E(iT) (22) 

- if (x, y) G E(J?) and RQ n S then (x, y) G E(5) (23) 

- if C n D G C(x) then {C, L>} C C(x) (24) 

- if C U D G C(x) then C G C(x) or D G C(x) (25) 

- if VS.C G C(x) and R Q n S then Vi?.C G C(x) (26) 

- if (x, y) G E(i2) and VR.C G C(x) then C G C(y) (27) 

- if (x, y) G E(22), trans n (R) and Vii.C G C(x) then Vi?.C G C(y) (28) 

- if 3R.C G C(x) then By £ A such that (x, y) G E(i?) and C G C(y) (29) 

- if (>nR.C) G C(x) then (i{(x,y) G E(R) \ C G C(y)} > n (30) 

- if (<nR.C) G C(x) then tf{(x,y) E E(i?) | C G C(y)} < n (31) 

- if (<nR.C) G C(x) and (x,y) G E(i?) then C G C(y) or C G C(y). (32) 



Given a model graph M = (A, I, C, E), the TZ-model corresponding to M is the interpretation 
X = (A, - x ) where: 

— a x = 1(a) for every individual name a, 

— A x = {x G A | A G C(x)} for every concept name A, 

— r x = E'(r) for every role name r G R, where E'(i?) for R G R U H are the smallest binary 
relations on A such that: 

• E(R) C E'(i2), 

• if -R E?e 5 then E'(-R) C E'(5), 

• if trans n (R) then E'fi?) o E'(R) C E'(i2). 

Note that the smallest binary relations mentioned above always exist: for each R G RU R , 
initialize E'(i?) with E(i?); then, while one of the above mentioned condition is not satisfied, 
extend the corresponding E'(R) minimally to satisfy the condition. 

Lemma 4.5. If I is the TZ-model corresponding to a consistent TZ-saturated model graph 
(A, I, C,E), then I is a model oflZ and, for every x G A and C G C(x), we have that x G C x . 

□ 

The first assertion of this lemma clearly holds. The second assertion can be proved by 
induction on the structure of C in a straightforward way. 

Let G = (V,E,v) be a C^xg-tableau for (TZ,T,A) and v G V be a non-state with 
Status (v) 7^ closed. A saturation path of v is a sequence -uo = v, vi, Vk of nodes of G, 
with k > 1, such that Type(vk) = state and 

— for every < i < k, Type(vi) = non-state, Status(vi) ^ closed and (uj, Ui+i) G E 1 , 

— Status(vk) {closed, incomplete}. 

Observe that each saturation path of v is finitej^] Furthermore, if Vi is a non-state with 
Status(vi) 7^ closed then Vi has a successor with Status (fj+i) 7^ closed; if is a non- 
state with only one successor Vi+i which is a state then Status(vi + \) 7^ incomplete, because after 

5 If a non-state v i+i is a successor of a non-state v, then RFmls(vi+i) D RFmls(vi) and either RFmls(vi + i) 3 
RFmls(vi) or FullLabel(ui+i) D FullLabel(«i). Recall also that RFmls(vi+i) and FullLabel(«i+i) are subsets 
of closure(7?., T, >t). 
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a state gets status incomplete all edges coming to its are deleted. Therefore, v has at least one 
saturation path. 

Lemma 4.6 (Completeness of Cshtq)- Let G = (V, E, v) be a CsuiQ-tableau for (TZ, T,A). 
Suppose Status(u) ^ closed. Then {71, T, A) is satisfiable. 

Proof. Let vo = v, v\, . . . , be a saturation path of v. We define a model graph M = (A, I, C, E) 
as follows: 

1. Let Aq be the set of all individuals occurring in Label (vk) and set A := Aq. For a £ Aq, define 
1(a) = a. Extend I to other individuals from I so that: if (a = b) € RFmls(vk) then 1(a) = 
1(6); if a £ I does not occur in (7Z, T, A) then 1(a) is some individual occurring in Label(vk). 
For each a £ Aq, mark a as unresoh;e(i|^] and set C(a) := {C | (a:C) £ FullLabel(ffc)}. For 
each role R, set E(R) := {{a,b) \ R(a,b) £ FullLabel(-u fc )}. 

2. For every unresolved node y £ A do: 

(a) If y £ Aq then let u = v & and W = {w £ V \ {vf., w) £ E and CELabelI(w) = y}. 

(b) Else let u = f{y) (/ is a constructed mapping that associates each node of M not 
belonging to Aq with a simple state of G; as a maintained property of /, Status(u) £ 
{closed, incomplete}) and let W = {w £ V \ (u,w) £ E}. 

(c) Fix a solution of ILConstraints(u), and for each w £ W: 

— if CELabelT(w) = testingClosedness then let n w = 1, 

— else let n w be the value of x w in that solution. 

(d) Delete from W elements w with n w = 0. 

(e) For each wq £ W do: 

— Let wo, • ■ ■ , Wh be a saturation path of wo hi G. 

— For i := 1 to do: 

• Add a new element z into Z\. 

• For each R £ CELabelR(w ) , add (y, 2) into E(i?) and into E(i?~). 

• Set C(z) to the set of concepts belonging to FullLabel(w^) and set f(z) := Wh- 

(f) Mark y as resolved. 

The defined model graph M may be infinite. It consists of a finite base created at the step[T] 
and disjoint trees (with backward edges to predecessors) created at the step [2] 

It is straightforward to prove that M is a consistent ^-saturated model graph. 

By the definition of Cs^zQ-tableaux f or 7^ anc [ ^ e construction of M: if (a: C) £ A 
then C £ C(I(a)); if fl(o, 6) £ ^ then (1(a), 1(6)) £ E(i2); if (a f 6) £ A then 1(a) ^ 1(6); and 



7" £ C(y) for all y £ Aq. We also have that T Q C(z) for all z £ Z\ — Z\q. Hence, by Lemma 4.5 



the interpretation corresponding to M is a model of (TZ,T,A). □ 



5 Concluding Remarks 



We have developed the first ExpTime tableau decision procedure for checking satisfiability of a 
knowledge base in the DL SUXQ. The complexity is measured using binary representation for 
numbers. Our procedure has been designed to increase efficiency of reasoning: 

— We use global state caching but not global caching plus inefficient cuts although the latter 
approach is much simpler and still guarantees the optimal complexity. 

— We use global state caching but not "pairwise" global state caching, cf. the lift from anywhere 
blocking to pairwise anywhere blocking [18]. This is a good optimization technique, as such 
a lift would make the graph larger and significantly reduce the chance of getting cache hits. 
It is a new technique for dealing with both inverse roles and quantified number restrictions. 



Each node of M will be marked either as unresolved or as resolved. 
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— Similarly to our previous works |25|26|24] , but in contrast to [12|13j , if v is a non-state such 
that Af terTrans(v) holds then we also apply global caching for the local graph of v. 

— Using rules with the highest priority for updating statuses of nodes means that the final 
statuses closed, open and incomplete of nodes are propagated "on-the-fly" . 

— In contrast to Farsiniamarj's method of exploiting integer programming for tableaux [3], in 
order to avoid nondeterminism we only check feasibility and do not find and use solutions of 
the considered set of constraints. Thus, as far as we know, we are the first one who applied 
integer linear feasibility checking to tableaux. In the current presentation of our procedure, 
feasibility checking is done "on-the-fly" . However, when it turns out that such checks would 
better be done not "on-the-fly", they can be delayed and executed occasionally without 
affecting soundness and completeness of the calculus (like checking fulfillment of eventualities 
in the tableau decision procedure for CPDL re9 in [24J). 

— We do not use pre-compilation techniques. Our operations are direct and natural. (Of course, 
not all pre-compilation techniques are bad.) The use of NNF for formulas is also natural and 
can be efficiently handled [23J. Treating TBox axioms as global assumptions is just for making 
the presentation simple. In practice, the absorption technique like the one discussed in [30] 
can be used to deal with TBox axioms. 

Our tableau decision procedure for SHIQ is a framework, which can be implemented with 
various optimization techniques [23] . In [23] we established a set of optimizations that co-operates 
very well with global caching and various search strategies for the DL ACC, including formulas 
normalization, formulas caching, literals elimination, propagation of unsat (closedness) for par- 
ent and sibling nodes, as well as cutoffs and compacting the graphj^] All of these optimization 
techniques can be adapted for SHIQ, and probably, new ones can be found. 

Implementing an efficient tableau reasoner for SHIQ is time-consuming. A preliminary 
implementation of our tableau decision procedure for SHIQ will be done first by our master 
student in the coming academic year. By the preliminary experimental results of |23|11] (on 
global caching for ACC) and [1] (on exploiting integer programming for SHQ), one can hope 
that our framework allows to create good reasoners for SHIQ. 

Our work provides not only techniques for increasing efficiency of reasoning and making it 
scalable w.r.t. quantified number restrictions. It does provide also the first method for devel- 
oping ExpTime tableau decision procedures instead of N2ExpTime ones |18|35j for ExpTime 
description logics with quantified number restrictions. The method is also applicable to graded 
modal logics. 
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